CRA loses taxpayer data to Heartbleed bug

Tax agency says 900 social insurance numbers compromised in online privacy breach

The Canada Revenue Agency says the social insurance numbers of 900 taxpayers were stolen last week by someone using the Heartbleed encryption vulnerability before the taxation agency shut down public access to its online services.

It happened over a six-hour period by someone exploiting the vulnerability in many supposedly secure websites that used an open-source encryption system.

The CRA said it will send registered letters to affected taxpayers and will not be emailing them because it doesn’t want fraudsters to use phishing schemes to further exploit the privacy breach.

“I want to express regret to Canadians for this service interruption,” CRA commissioner Andrew Treusch said. “I share the concern and dismay of those individuals whose privacy has been impacted by this malicious act.”

Other personal data and possibly businesses’ information may also have been lost.

“We are currently going through the painstaking process of analyzing other fragments of data, some that may relate to businesses, that were also removed,” Treusch said.

Taxpayers whose data was compromised will get bolstered CRA account protection and free access to credit protection services.

Canada’s Privacy Commissioner is also investigating.

Online services, including the E-file and Netfile online income tax portals, were patched and re-launched Sunday after what the CRA called a vigourous test to ensure they are safe and secure.

The CRA cut off access to those services April 8 as word spread that the Heartbleed bug had given hackers access to passwords, credit card numbers and other information at many websites.

People whose income tax filing was delayed by last week’s CRA interruption have been given until May 5 – beyond the usual April 30 filing deadline – to file returns without being penalized.

The Heartbleed vulnerability, which has existed for two years, compromised secure web browsing at some sites despite the display of a closed padlock that indicates an encrypted connection.

Just Posted

Cafe Guido manager spills the beans on new coffee shop drive-thru

“The core drink menu is the same, but there will be new drinks - new cold drinks and new food”

Arrest made in Port Alice mail bomb incident

A 73 year old resident of Whitehorse, Yukon, was arrested on September 13th and remains in custody.

Municipal spending outpaces population growth 4-fold in B.C.: report

Canadian Federation of Independent Business has released its annual operational spending report

Three mayoral races in the North Island

Elections BC has finalized their nomination list for municipal, local elections for… Continue reading

Port Hardy resident furious over smart meter installation

“They came into my house without consent and it wasn’t even a BC Hydro employee.”

B.C. tent city ‘devastated’ after flash flood

Maple Ridge mayor says that residents shouldn’t have to return to their flooded tents

Syrian family can, finally, feel safe after settling in B.C.

Anglican Church of the Holy Trinity White Rock meets sponsored family for the first time

1st private moon flight passenger to invite creative guests

The Big Falcon Rocket is scheduled to make the trip in 2023, SpaceX founder Elon Musk announced at an event Monday at its headquarters near Los Angeles.

‘Game of Thrones,’ ‘Mrs. Maisel’ triumph at Emmys

In a ceremony that started out congratulating TV academy voters for the most historically diverse field of nominees yet, the early awards all went solely to whites.

Korean leaders meet in Pyongyang for potentially tough talks

South Korean President Moon Jae-in began his third summit with North Korean leader Kim Jong Un on Tuesday.

Russia blames Israel for plane shot down by Syrian missile

A Russian reconnaissance aircraft was brought down over the Mediterranean Sea as it was returning to its home base inside Syria, killing all 15 people on board.

Vancouver park board passes motion to learn Indigenous place names

The name of Vancouver’s Stanley Park is now up for debate as the city’s park board confronts its colonial past and pursues reconciliation.

Champ golfer from Spain killed in Iowa; suspect charged

Police said Celia Barquin Arozamena was found dead Monday morning at Coldwater Golf Links in Ames, about 30 miles north of Des Moines.

Trudeau upset after meeting with Saskatchewan chiefs

Trudeau is upset about how time was managed in a recent meeting

Most Read