Sophisticated criminals used an online service run by the IRS to steal personal tax information from more than 100,000 taxpayers.