The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

“Skeena,” by John Hudson and Paul Hanslow is one of five fonts in the running to become the default for Microsoft systems and Office programs. (Black Press Media File Photo)
Font named after Skeena River could become the next Microsoft default

One of the five new fonts will replace Calibri, which has been Microsoft’s default since 2007

Gerry Thiessen (left) with his spouse Lesley is encouraging others to sign up to get vaccinated for COVID-19. Both have recently received their first shot. (Photo submitted)
Vanderhoof Mayor Gerry Thiessen encourages others to get vaccinated

“If not for yourself, please do it for others in our community.”

Timothy Reimer lives in Vanderhoof and is a member of the Spruce City Wildlife Association, which has been working with removing trash from regional areas through its BackCountry Cleanups Initiative.
Local Spruce City Wildlife Association member helps keep the environment clean

Father and Plateau mill employee cares about future generations

CN Rail locomotives are moved on tracks past cargo containers sitting on idle train cars at port in Vancouver last February. RCMP in Northern, B.C. are currently investigating after a CN Freight Train struck some debris that appeared to be intentionally placed across the track on the Nechako River Bridge in Fraser Lake (THE CANADIAN PRESS/Darryl Dyck)
Freight Train strikes debris on Nechako River Bridge: RCMP

Intentionally placed debris could have resulted in a disaster

Protesters attempt to stop clear-cutting of old-growth trees in Fairy Creek near Port Renfrew. (Will O���Connell photo)
VIDEO: Workers, activists clash at site of Vancouver Island logging operation

Forest license holders asking for independent investigation into incident

Members of Vancouver Symphony Orchestra. (File photo)
B.C.-wide #DayOfMusic to feature 100-plus free virtual concerts May 15

‘Our colleagues across the province have figured out new ways to perform and connect,’ VSO boss says

Two passengers were recently fined thousands of dollars after they faked their pre-flight COVID-19 test results. (Paul Clarke/Black Press)
2 passengers in Canada fined thousands for faking pre-flight COVID-19 tests

The government issued a warning Thursday to others thinking of doing the same

(File)
With revenge porn on the rise in 2021, B.C. seeks feedback for new legislation

New legislation could help victims take down images and receive compensation

(Kamloops This Week file photo)
Federal police unit takes over probe of B.C. regional district’s spending

Financial Integrity Sensitive Investigations Unit is now reviewing the case

A black bear made a visit to downtown Vancouver Tuesday, May 4. The animal was spotted on train tracks in Gastown shortly after at 2:30 p.m. (Twitter/Craig Minielly)
VIDEO: Black bear spotted meandering around downtown Vancouver

The bear was reportedly tranquilized by conservation officers Tuesday afternoon

Flow Academy is located at 1511 Sutherland Avenue in Kelowna. (Michael Rodriguez/Capital News)
Interior Health locks out Kelowna martial arts gym following COVID violations

Actions were taken after all other steps to gain compliance were exhausted, says health authority

A man who allegedly spat at and yelled racial slurs at an Asian family was arrested for hate-motivated assault Tuesday. (Black Press Media file photo)
Arrest made after man spits, yells anti-Asian racial slurs at Victoria mom and kids

The man was arrested for hate-motivated assault near Quadra Elementary School Tuesday

A lady wears a vaccinated sticker after receiving a COVID-19 vaccine at a vaccination clinic run by Vancouver Coastal Health, in Richmond, B.C., Saturday, April 10, 2021. THE CANADIAN PRESS/Jonathan Hayward
Canada may find it challenging to reach herd immunity from COVID-19, experts say

Level of immunity among the population changes with the variants, especially the more transmissible strains

Most Read