CRA loses taxpayer data to Heartbleed bug

Tax agency says 900 social insurance numbers compromised in online privacy breach

The Canada Revenue Agency says the social insurance numbers of 900 taxpayers were stolen last week by someone using the Heartbleed encryption vulnerability before the taxation agency shut down public access to its online services.

It happened over a six-hour period by someone exploiting the vulnerability in many supposedly secure websites that used an open-source encryption system.

The CRA said it will send registered letters to affected taxpayers and will not be emailing them because it doesn’t want fraudsters to use phishing schemes to further exploit the privacy breach.

“I want to express regret to Canadians for this service interruption,” CRA commissioner Andrew Treusch said. “I share the concern and dismay of those individuals whose privacy has been impacted by this malicious act.”

Other personal data and possibly businesses’ information may also have been lost.

“We are currently going through the painstaking process of analyzing other fragments of data, some that may relate to businesses, that were also removed,” Treusch said.

Taxpayers whose data was compromised will get bolstered CRA account protection and free access to credit protection services.

Canada’s Privacy Commissioner is also investigating.

Online services, including the E-file and Netfile online income tax portals, were patched and re-launched Sunday after what the CRA called a vigourous test to ensure they are safe and secure.

The CRA cut off access to those services April 8 as word spread that the Heartbleed bug had given hackers access to passwords, credit card numbers and other information at many websites.

People whose income tax filing was delayed by last week’s CRA interruption have been given until May 5 – beyond the usual April 30 filing deadline – to file returns without being penalized.

The Heartbleed vulnerability, which has existed for two years, compromised secure web browsing at some sites despite the display of a closed padlock that indicates an encrypted connection.

Just Posted

Chilliwack’s Jordyn Huitema, a member of the Canadian national women’s soccer squad.
Another scoreless draw for Chilliwack’s Jordyn Huitema and Canadian national women’s soccer squad

Canada played Brazil to a 0-0 tie days after doing the same in a friendly against the Czech Republic

FVRD surveyed public opinion on cannabis production and processing in the electoral areas. Odour and distance from residential areas were the top concerns. (Black Press file)
Cannabis production and processing rules being drafted by Fraser Valley Regional District

Data from public opinion survey will be used to guide cannabis-related land use

Robert Nelson, 35, died after being stabbed at a homeless camp in Abbotsford on April 7 of this year.
Mom pleads for information about son’s killing at Abbotsford homeless camp

Robert Nelson, 35, described as ‘man who stood for justice, honour, respect’

Police arrest the suspect in an attempted armed bank robbery on June 2 at the Scotiabank at Gladwin Road and South Fraser Way in Abbotsford. (Photo by Garry Amyot)
Abbotsford bank robbery suspect who was stopped by customers faces more charges

Neil Simpson now faces total of eight charges, up from the initial two

Black Press file photo.
COVID exposure recorded at Kent Elementary

Students, families encouraged to keep monitoring for symptoms

Canadian Prime Minister Justin Trudeau participates in a plenary session at the G7 Summit in Carbis Bay, England on Friday June 11, 2021. THE CANADIAN PRESS/Adrian Wyld
Canada donating 13M surplus COVID-19 vaccine doses to poor countries

Trudeau says the government will pay for 87 million shots to be distributed to poor countries

Kelowna-Lake Country MLA Norm Letnick, assistant deputy speaker at the B.C. legislature, presides over committee discussions. The legislature is completing its delayed spring session this week, with most MLAs participating by video conference. (Hansard TV)
B.C.’s daily COVID-19 infections dip below 100 over weekend

Only 68 new cases recorded Monday, four additional deaths

The BC Ferries website went down for a short while Monday morning following a provincial announcement that recreational travel between health authorities can resume Tuesday. (Black Press Media file photo)
BC Ferries’ website crashes in wake of provincial reopening announcement

Website back up now, recreational travel between health regions to resume as of Tuesday

The Kamloops Indian Residential School is photographed using a drone in Kamloops, B.C., Monday, June, 14, 2021. The remains of 215 children were discovered buried near the former school earlier this month. THE CANADIAN PRESS/Jonathan Hayward
Communities grapple with what to do with former residential and day schools

Some tear them down as a tool to help healing, others repurpose them as tools for moving forward

FILE – Provincial health officer Dr. Bonnie Henry talks about B.C.’s plan to restart the province during a press conference at Legislature in Victoria, Tuesday, May 25, 2021. THE CANADIAN PRESS/Chad Hipolito
B.C. watching U.K.’s COVID struggles but don’t think province will see similar pitfalls

Studies show that one dose of vaccine is only 33 per cent effective in preventing B.1.617.2 spread

Join Black Press Media and Do Some Good
Join Black Press Media and Do Some Good

Pay it Forward program supports local businesses in their community giving

Cannabis bought in British Columbia (Ashley Wadhwani/Black Press Media)
Is it time to start thinking about greener ways to package cannabis?

Packaging suppliers are still figuring eco-friendly and affordable packaging options that fit the mandates of Cannabis Regulations

RCMP Const. Shelby Patton is shown in this undated handout photo. RCMP say that Patton was hit by an allegedly stolen truck that he had pulled over on Saturday morning in Wolseley, east of Regina. THE CANADIAN PRESS/HO, RCMP
Pair charged in Saskatchewan Mountie’s death make first court appearance

Const. Shelby Patton was hit by an allegedly stolen truck that he had pulled over Saturday morning

David and Collet Stephan leave for a break during an appeal hearing in Calgary on Thursday, March 9, 2017. THE CANADIAN PRESS/Todd Korol
Appeal Court rejects stay for Alberta couple facing third trial in son’s death

Pair accused in their earlier trials of not seeking medical attention for their son sooner

Most Read