CRA loses taxpayer data to Heartbleed bug

Tax agency says 900 social insurance numbers compromised in online privacy breach

The Canada Revenue Agency says the social insurance numbers of 900 taxpayers were stolen last week by someone using the Heartbleed encryption vulnerability before the taxation agency shut down public access to its online services.

It happened over a six-hour period by someone exploiting the vulnerability in many supposedly secure websites that used an open-source encryption system.

The CRA said it will send registered letters to affected taxpayers and will not be emailing them because it doesn’t want fraudsters to use phishing schemes to further exploit the privacy breach.

“I want to express regret to Canadians for this service interruption,” CRA commissioner Andrew Treusch said. “I share the concern and dismay of those individuals whose privacy has been impacted by this malicious act.”

Other personal data and possibly businesses’ information may also have been lost.

“We are currently going through the painstaking process of analyzing other fragments of data, some that may relate to businesses, that were also removed,” Treusch said.

Taxpayers whose data was compromised will get bolstered CRA account protection and free access to credit protection services.

Canada’s Privacy Commissioner is also investigating.

Online services, including the E-file and Netfile online income tax portals, were patched and re-launched Sunday after what the CRA called a vigourous test to ensure they are safe and secure.

The CRA cut off access to those services April 8 as word spread that the Heartbleed bug had given hackers access to passwords, credit card numbers and other information at many websites.

People whose income tax filing was delayed by last week’s CRA interruption have been given until May 5 – beyond the usual April 30 filing deadline – to file returns without being penalized.

The Heartbleed vulnerability, which has existed for two years, compromised secure web browsing at some sites despite the display of a closed padlock that indicates an encrypted connection.

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

First Responders hockey match a great night on and off the ice

‘My face was still hurting from smiling and laughing so much’

Ashcroft closer to getting two Level 2 EV charging stations

Town will be part of a network of charging stations in central and northern B.C.

Campaign aims to end the stigma that still surrounds dementia

Ashcroft resident speaks out about taking care of someone with dementia

One man dead after police-involved shooting near Lytton

Two other people in the residence were evacuated safely

Local News Briefs: Cluttered rooms getting you down? Get ready for purge the house market

Plus a Green Spaces presentation, firearms course, food bank/Equality Project fundraiser, and more

‘Scariest boat ride of my life’: Passengers trapped by ice on rocky B.C. ferry sailing

The Nimpkish docked in Bella Coola on Jan.12 coated in a thick layer of ice

Special prosecutor to review Cranbrook toddler drowning case

Evidence disclosure at issue in the case of a woman sentenced for criminal negligence causing death

UPDATE: Supreme Court dismisses B.C.’s appeal in Trans Mountain pipeline case

Judges decide whether B.C.’s power to protect environment can include impeding a federal project

10 B.C. cities break temperature records in winter storm

Quesnel dipped to -41.9 C, breaking a record from 1916

Vancouver Island child struck, pinned under SUV while sledding

Boy suffers serious injuries, no charges laid in incident

Unprepared for chemistry test, B.C. student begs superintendent to call another snow day

The student from West Vancouver promised he would study more, but was distracted by skiing and hot chocolate

Blast of winter continues across B.C., bringing frigid weather and more snow

A number of weather warnings continued Thursday as winter storms continue in B.C.

Over 16,000 people nabbed by RCMP between border crossings in 2019

In 2019, 63,830 claims were filed, up from 55,040 in 2018

Most Read