The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Ranch Musings columnist David Zirnhelt. (File Photo)
Ranch Musings: Perennial cereals and their potential to heal

Columnist David Zirnhelt shares information about intermediate wheatgrass

Natasha Wasmuth receives her Paul Harris Fellowship Award from Rotary Club of Quesnel 2019-20 president Simon Turner Nov. 19, 2020. (Photo Submitted)
Rotary honours epilepsyQuesnel founder Natasha Wasmuth

The Rotary Club of Quesnel presented Wasmuth with a Paul Harris Fellowship Award

Tony Goulet was elected as the chair of the Quesnel School District board during the board’s Nov. 18 meeting. (File photo - Quesnel Cariboo Observer)
Quesnel School District outlines where pandemic dollars have gone

The district has spent over $250,000 in government funding to slow the spread of COVID-19

Black Bears are a common sight in the Cariboo, and especially in 2020. (Karen Powell Photo - Quesnel Cariboo Observer)
Bear sightings in Cariboo up in 2020

WildSafeBC received nearly 1,000 reports of black bears in the Cariboo from January to October

College of New Caledonia (CNC) Quesnel Campus Millwright/Machinist instructor Sergio Jorquera demonstrates working with compressed air Friday, Feb. 21, 2020, during Science and Technology Day at the college. CNC is hosting a virtual open house Thursday, Nov. 26 from 10 a.m. to 7 p.m. to share what the college has to offer. (Quesnel Cariboo Observer File Photo)
College of New Caledonia hosting virtual open house Nov. 26

The online event runs from 10 a.m. to 7 p.m. and gives a taste of what it’s like to be a CNC student

Kyle Charles poses for a photo in Edmonton on Friday, Nov. 20, 2020. Marvel Entertainment, the biggest comic book publisher in the world, hired the 34-year-old First Nations illustrator as one of the artists involved in Marvel Voice: Indigenous Voices #1 in August. THE CANADIAN PRESS/Jason Franson
VIDEO: Indigenous illustrator of new Marvel comic hopes Aboriginal women feel inspired

Kyle Charles says Indigenous women around the world have reached out

Prime Minister Justin Trudeau speak to the media about the COVID-19 virus outside Rideau Cottage in Ottawa, Friday, Nov. 20, 2020. THE CANADIAN PRESS/Adrian Wyld
Long-awaited federal rent subsidy program for businesses hurt by COVID-19 opens today

The new program will cover up to 65 per cent of rent or commercial mortgage interest

An Oceana Canada audit of Canadian fish stocks reveals a growing number with critical populations, calling on Fisheries and Oceans Canada to enact existing commitments. (File photo)
B.C.’s declining fisheries the result of poor DFO management: audit

Oceana Canada calls for follow through on government commitments

Join Black Press Media and Do Some Good
Join Black Press Media and Do Some Good

Pay it Forward program supports local businesses in their community giving

Randy Bell. (File photo)
Former northern B.C. mayoral candidate arrested after allegedly refusing to wear mask

Randy Bell handcuffed and given a warning at Bulkley Valley Credit Union in Smithers

James Corden on the Late Late Show talking about BC Ferries on Wednesday, Nov. 18, 2020. (Screenshot)
‘You’ll see it when you see it’: BC Ferries mask graphic gains James Corden’s attention

Turns out, James Corden fans were just as quick as B.C. social media users to pick up on the dual imagery

Most Read