CRA loses taxpayer data to Heartbleed bug

Tax agency says 900 social insurance numbers compromised in online privacy breach

The Canada Revenue Agency says the social insurance numbers of 900 taxpayers were stolen last week by someone using the Heartbleed encryption vulnerability before the taxation agency shut down public access to its online services.

It happened over a six-hour period by someone exploiting the vulnerability in many supposedly secure websites that used an open-source encryption system.

The CRA said it will send registered letters to affected taxpayers and will not be emailing them because it doesn’t want fraudsters to use phishing schemes to further exploit the privacy breach.

“I want to express regret to Canadians for this service interruption,” CRA commissioner Andrew Treusch said. “I share the concern and dismay of those individuals whose privacy has been impacted by this malicious act.”

Other personal data and possibly businesses’ information may also have been lost.

“We are currently going through the painstaking process of analyzing other fragments of data, some that may relate to businesses, that were also removed,” Treusch said.

Taxpayers whose data was compromised will get bolstered CRA account protection and free access to credit protection services.

Canada’s Privacy Commissioner is also investigating.

Online services, including the E-file and Netfile online income tax portals, were patched and re-launched Sunday after what the CRA called a vigourous test to ensure they are safe and secure.

The CRA cut off access to those services April 8 as word spread that the Heartbleed bug had given hackers access to passwords, credit card numbers and other information at many websites.

People whose income tax filing was delayed by last week’s CRA interruption have been given until May 5 – beyond the usual April 30 filing deadline – to file returns without being penalized.

The Heartbleed vulnerability, which has existed for two years, compromised secure web browsing at some sites despite the display of a closed padlock that indicates an encrypted connection.

Just Posted

Quesnel excels in Prince George mud bog

Justin Price and Kevin Shaw got second and third place finishes at the two-day event

Elizebeth Montgomery running for Area B CRD director

The Bouchie Lake resident has served on the CRD’s Advisory Planning Commission since 2008

Quesnel Barrel Racing’s Sun Run a cloudy affair

Wet and cold conditions didn’t stop racers from putting on a show

Alex Fraser Park, Barkerville Heritage Trust receive provincial Rural Dividend grants

AFP, Barkerville awarded $500,000 each for facility upgrades and housing initiatives respectively

Court of appeal grants injunction on Taseko’s exploratory drilling in B.C. Interior

The decision provides temporary protection and relief, say Chief Joe Alphonse

B.C. RCMP turn to Const. Scarecrow to shock speeders into slowing down

New addition will watch over drivers from a Coquitlam median for first-of-its-kind pilot in Canada

Kim agrees to dismantle main nuke site if US takes steps too

Kim promised to accept international inspectors to monitor the closing of a key missile test site and launch pad and to visit Seoul soon.

Dozens speak at Vancouver hearing that could see duplexes replace single homes

The city clerk says 73 people signed up to speak at the hearing that began early Tuesday evening and adjourned hours later with 34 speakers still waiting.

North Carolina gov pleads with storm evacuees to be patient

The death toll rose to at least 37 in three states Tuesday, with 27 fatalities in North Carolina.

North and South Korea say they plan to bid for 2032 Olympics

Moon and Kim announced a sweeping set of agreements including a vow to work together to host the Summer Olympics in 2032.

Russia’s reinstatement after doping scandal goes to a vote

The World Anti-Doping Agency is due to vote Thursday Sept. 20, 2018, on possible reinstatement of Russia.

Ontario wins stay on ruling that struck down council-cutting plan

The province had argued the stay was necessary to eliminate uncertainty surrounding the Oct. 22 vote, and the Court of Appeal agreed.

B.C. cannabis producer Tilray hits at $20-billion high as stock price explodes

This is the first export of a cannabis product from a Canadian company to the U.S.

NDP tax increases adding up for B.C. residents: study

Carole James says Fraser Institute analysis ignores tax relief

Most Read