CRA loses taxpayer data to Heartbleed bug

Tax agency says 900 social insurance numbers compromised in online privacy breach

The Canada Revenue Agency says the social insurance numbers of 900 taxpayers were stolen last week by someone using the Heartbleed encryption vulnerability before the taxation agency shut down public access to its online services.

It happened over a six-hour period by someone exploiting the vulnerability in many supposedly secure websites that used an open-source encryption system.

The CRA said it will send registered letters to affected taxpayers and will not be emailing them because it doesn’t want fraudsters to use phishing schemes to further exploit the privacy breach.

“I want to express regret to Canadians for this service interruption,” CRA commissioner Andrew Treusch said. “I share the concern and dismay of those individuals whose privacy has been impacted by this malicious act.”

Other personal data and possibly businesses’ information may also have been lost.

“We are currently going through the painstaking process of analyzing other fragments of data, some that may relate to businesses, that were also removed,” Treusch said.

Taxpayers whose data was compromised will get bolstered CRA account protection and free access to credit protection services.

Canada’s Privacy Commissioner is also investigating.

Online services, including the E-file and Netfile online income tax portals, were patched and re-launched Sunday after what the CRA called a vigourous test to ensure they are safe and secure.

The CRA cut off access to those services April 8 as word spread that the Heartbleed bug had given hackers access to passwords, credit card numbers and other information at many websites.

People whose income tax filing was delayed by last week’s CRA interruption have been given until May 5 – beyond the usual April 30 filing deadline – to file returns without being penalized.

The Heartbleed vulnerability, which has existed for two years, compromised secure web browsing at some sites despite the display of a closed padlock that indicates an encrypted connection.

Just Posted

Ashcroft hospital emergency closed sign, 2016. Photo credit: Barbara Roden
Ashcroft Hospital emergency department closed this weekend

Closure due to unexpected limited physician availabiliy, says Interior Health

Residents line up outside the Vernon Recreation Complex for their COVID-19 vaccine Saturday, June 5. (Jennifer Smith - Morning Star)
No appointments necessary for first dose COVID-19 vaccine: Interior Health

People can just show up at clinics, register on the spot and get the shot

Heidi Roy of the Cariboo Jade Shop in Cache Creek with the 3,000 jade boulder, which is now on secure display inside the shop. (Photo credit: Barbara Roden)
Massive jade boulder returns to Cache Creek store six months after daring heist

The 3,000-pound boulder was stolen on Dec. 19, 2020 and found abandoned in the bush a week later

Dr. Albert de Villiers, chief medical health officer for the Interior Health Authority. (Contributed)
Child sex crimes charges against Interior’s top doc won’t impact pandemic response: Dix

Dr. Albert de Villiers is charged with sexual assault and sexual interference

Canadian Prime Minister Justin Trudeau participates in a plenary session at the G7 Summit in Carbis Bay, England on Friday June 11, 2021. THE CANADIAN PRESS/Adrian Wyld
Canada donating 13M surplus COVID-19 vaccine doses to poor countries

Trudeau says the government will pay for 87 million shots to be distributed to poor countries

Kelowna-Lake Country MLA Norm Letnick, assistant deputy speaker at the B.C. legislature, presides over committee discussions. The legislature is completing its delayed spring session this week, with most MLAs participating by video conference. (Hansard TV)
B.C.’s daily COVID-19 infections dip below 100 over weekend

Only 68 new cases recorded Monday, four additional deaths

The BC Ferries website went down for a short while Monday morning following a provincial announcement that recreational travel between health authorities can resume Tuesday. (Black Press Media file photo)
BC Ferries’ website crashes in wake of provincial reopening announcement

Website back up now, recreational travel between health regions to resume as of Tuesday

The Kamloops Indian Residential School is photographed using a drone in Kamloops, B.C., Monday, June, 14, 2021. The remains of 215 children were discovered buried near the former school earlier this month. THE CANADIAN PRESS/Jonathan Hayward
Communities grapple with what to do with former residential and day schools

Some tear them down as a tool to help healing, others repurpose them as tools for moving forward

FILE – Provincial health officer Dr. Bonnie Henry talks about B.C.’s plan to restart the province during a press conference at Legislature in Victoria, Tuesday, May 25, 2021. THE CANADIAN PRESS/Chad Hipolito
B.C. watching U.K.’s COVID struggles but don’t think province will see similar pitfalls

Studies show that one dose of vaccine is only 33 per cent effective in preventing B.1.617.2 spread

RCMP Const. Shelby Patton is shown in this undated handout photo. RCMP say that Patton was hit by an allegedly stolen truck that he had pulled over on Saturday morning in Wolseley, east of Regina. THE CANADIAN PRESS/HO, RCMP
Pair charged in Saskatchewan Mountie’s death make first court appearance

Const. Shelby Patton was hit by an allegedly stolen truck that he had pulled over Saturday morning

David and Collet Stephan leave for a break during an appeal hearing in Calgary on Thursday, March 9, 2017. THE CANADIAN PRESS/Todd Korol
Appeal Court rejects stay for Alberta couple facing third trial in son’s death

Pair accused in their earlier trials of not seeking medical attention for their son sooner

Highway notices like this come down effective June 14. Public health restrictions on non-essential travel and commercial operation have hit local businesses in every corner of B.C. (B.C. government)
Province-wide travel back on in B.C.’s COVID-19 restart plan

Gathering changes include up to 50 people for outdoor events

Calgary Stampeders’ Jerome Messam leaps over a tackle during second half CFL western semifinal football action in Calgary, Sunday, Nov. 15, 2015.THE CANADIAN PRESS/Jeff McIntosh
CFL football will be played this summer in Canada

Governors vote unanimously in favour to start the ‘21 campaign on Aug. 5

Most Read