The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Just Posted

The proposed design of the five-storey building on Front Street. (City of Penticton)
Five-storey building proposed for Penticton’s Front Street

It will be the second time the proposal will head to council

“65 years, I’ve carried the stories in my mind and live it every day,” says Jack Kruger. (Athena Bonneau)
‘Maybe this time they will listen’: Survivor shares stories from St. Eugene’s residential school

Jack Kruger, living in Syilx territory, wasn’t surprised by news of 215 children’s remains found on the grounds of the former Kamloops Indian Residential School

RCMP thanked the public for assistance in finding Benjamin Archie, last seen in Princeton. (RCMP)
Missing Chilliwack man found safe and sound

The 80-year-old had walked away from his home in Chilliwack

57-year-old Kathleen Richardson was discovered deceased in her home Wednesday, June 9, 2021. Her death is considered a homicide and connected to the slain brothers found on a Naramata forest road. (Submitted)
Naramata community in shock as condolences pour in for homicide victim Kathy Richardson

Richardson was well liked in the community, a volunteer firefighter with a home-based salon

Princeton GSAR responds 24 hours a day, 365 days a year. In 2020 the crew was called out 34 times, and members spent 721 hours on calls, and 683 hours training. Photo Princeton GSAR Facebook
Teen missing in Manning Park found after 24 hours

Young man spends night on mountain and survives with just a few scrapes

At an outdoor drive-in convocation ceremony, Mount Royal University bestows an honorary Doctor of Laws on Blackfoot Elder and residential school survivor Clarence Wolfleg in Calgary on Tuesday, June 8, 2021. THE CANADIAN PRESS/Jeff McIntosh
‘You didn’t get the best of me’: Residential school survivor gets honorary doctorate

Clarence Wolfleg receives honorary doctorate from Mount Royal University, the highest honour the school gives out

The RCMP presence in Central Okanagan public schools is being reviewed by the board of education. (File photo)
RCMP presence welcomed in Central Okanagan public schools

Staff survey feedback overwhelmingly positive from students, staff and parents

18-year-old skier Logan Leach follows his guide, Julien Petit, down an alpine track. The Lumby athlete who is visually impaired has been named to Alpine Canada’s Ski Team ahead of the 2022 Paralympic Games in Beijing. (Contributed)
North Okanagan teen named to national Para-Alpine ski team

18-year-old Logan Leach officially joins Canada’s Para-Alpine roster ahead of Beijing 2022

Carina Stokes, bar manager at Enderby’s Small Axe Bistro, was recognized as one of four exceptional B.C. restaurant workers by the British Columbia Restaurant and Foodservices Association Tuesday, June 8, 2021. (Contributed)
Okanagan bar manager recognized as ‘stand-up’ B.C. restaurant worker

Small Axe Roadhouse’s Carina Stokes one of four to receive special recognition from the BCRFA

“They will never be forgotten, every child matters,” says Sioux Valley Chief Jennifer Bone in a video statement June 1. (Screen grab)
104 ‘potential graves’ detected at site of former residential school in Manitoba

Sioux Valley Dakota Nation working to identify, repatriate students buried near former Brandon residential school

The Queen Victoria statue at the B.C. legislature was splattered with what looks like red paint on Friday. (Nicole Crescenzi/News Staff)
Queen Victoria statue at B.C. legislature vandalized Friday

Statue splattered with red paint by old growth forest proponents

Police cars are seen parked outside Vancouver Police Department headquarters on Saturday, January 9, 2021. THE CANADIAN PRESS/Darryl Dyck
Vancouver police officer charged with assault during an arrest in 2019

The service has released no other details about the allegations

Most Read