The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Interior Health nurses administer Pfizer-BioNTech COVID-19 vaccines to seniors and care aids in Kelowna on Tuesday, March 16. (Phil McLachlan/Kelowna Capital News)
69 new cases of COVID-19 in Interior Health

The total number of cases in the region is now at 9,840 since the pandemic began

Kelowna General Hospital (File photo)
Interior Health hospitals not strained by rising COVID case counts

While provincial hospitalizations rise, health care systems in the B.C. Interior remain robust, say officials

An Interior Health nurse administers Pfizer-BioNTech COVID-19 vaccines to seniors and care aids in Kelowna on Tuesday, March 16, 2021. (Phil McLachlan/Kelowna Capital News)
105 new COVID-19 cases in Interior Health

Just over 8,000 new vaccine doses administered in the region for a total of 158,000 to date

Clearwater sunrise (Kelly Ludbrook photo)
The Student Journal: Painting Sunrise

The Student Journal is a new section that showcases the work of the local high schoolers.

KalTire presented the Clearwater Secondary School graduating class of 2021 with a cheque for $1,100 on April 6 to help with the teens' fundraising efforts. Allison MacLaren, who works front office, and manager Scott Thomas organized the fundraiser through community donations. Members of the community were asked if they wanted to donate $10 to the cause when they visited the shop for their seasonal tire change overs. MacLaren said a whopping 95 per cent of customers made a donation to the graduating class, raising almost $1,000. Black River Contracting also made a donation to boost the funds to an even $1,000, and with funds from Birch Island Diesel and Bond Tattoo of $100, the total came to $1,100. Thomas, MacLaren and the Class of 2021 would like to thank the community for their generous donations. From l-r: CSS Grad 2021 committee members Julie Simard, Vix Meyer (CSS parent grad president), Mackenzie Ross, Piet Oud and Scott Thomas. (Photo taken by Allison MacLaren)
Clearwater KalTire raises funds for CSS Class of ‘21

KalTire presented the Clearwater Secondary School graduating class of 2021 with a… Continue reading

Rainbow trouts thrashing with life as they’re about to be transferred to the largest lake of their lives, even though it’s pretty small. These rainbows have a blue tinge because they matched the blue of their hatchery pen, but soon they’ll take on the green-browns of their new home at Lookout Lake. (Zoe Ducklow/News Staff)
VIDEO: B.C. lake stocked with hatchery trout to delight of a seniors fishing club

The Cherish Trout Scouts made plans to come back fishing soon

Paper Excellence took over Catalyst Paper operations in B.C. in 2018. (Paper Excellence photo)
The plane blasted through an airport fence and down a hill, before stopping before a cement barrier on Highway 5A, right in front of a school bus. Photo submitted.
Student pilot crashes plane onto Highway 5A almost hitting school bus

Aircraft hit pavement right in front of school bus

Eight-year-old Piper and her family were raising money to help Guinevere, the bearded dragon, get a gynecological surgery. Sadly, the reptile didn’t survive the procedure. (Jackee Sullivan/Special to Langley Advance Times)
Lizard fails to survive surgery, GoFundMe dollars help Langley family offset medical bills

Guinevere, a pet bearded dragon, underwent an ovariectomy on Tuesday

A driver stopped by Saanich police following a road rage incident on April 15 was found to be impaired, in violation of a license restriction and in a damaged vehicle. They received a 90-day driving prohibition and a 30-day vehicle impound. (Saanich Police Traffic Safety Unit/Twitter)
Road rager fails breathalyzer on busy B.C. highway in vehicle he shouldn’t be driving

Saanich police say man was operating vehicle without required ignition lock

B.C. Premier John Horgan wears a protective face mask to help prevent the spread of COVID-19. THE CANADIAN PRESS/Jonathan Hayward
B.C. Premier John Horgan booked to get AstraZeneca shot Friday

‘Let’s show all British Columbians that the best vaccine is the one that’s available to you now,’ he said

Doses of the Moderna COVID‑19 vaccine in a freezer trailer, to be transported to Canada during the COVID-19 pandemic. THE CANADIAN PRESS/Nathan Denette
Pfizer to increase vaccine deliveries in Canada as Moderna supply slashed

Moderna plans to ship 650,000 doses of its vaccine to Canada by the end of the month, instead of the expected 1.2 million

Dr. Bonnie Henry speaks about the province’s COVID-19 vaccine plans during a news conference at the legislature in Victoria. THE CANADIAN PRESS/Chad Hipolito
P.1 variant likely highest in B.C. due to more testing for it: Dr. Henry

Overall, just under 60% of new daily cases in the province involve variants

Most Read