The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

A man wearing a face mask to prevent the spread of COVID-19 walks past a mural in Vancouver on Monday, Nov. 30, 2020. THE CANADIAN PRESS/Marissa Tiel
212 new COVID-19 cases in Interior Health over the weekend

A total of 490 cases remain active; 15 in hospital

Corey Harkness, who is free on bail, is slated to make his first appearance in B.C. Supreme Court in Kamloops on Dec. 14, 2020. A trial date has not yet been set. (COREY HARKNESS/FACEBOOK)
Accused in Cache Creek homicide will stand trial

Corey Harkness, 33, is charged with second-degree murder

COVID-19. (Image courtesy CDC)
47 new COVID-19 cases in Interior Health region

1,538 total cases, 399 are active, ten in hospital

COVID-19. (Image courtesy CDC)
Interior Health reports 65 new cases of COVID-19

Province-wide, there are 887 new cases of the virus

COVID-19. (Image courtesy CDC)
Interior Health reports 70 new cases overnight

The total number of cases in the region is now at 1,426

A B.C. Ambulance Service paramedic wearing a face mask to curb the spread of COVID-19 moves a stretcher outside an ambulance at Royal Columbia Hospital, in New Westminster, B.C., on Sunday, November 29, 2020. THE CANADIAN PRESS/Darryl Dyck
B.C. records deadliest weekend of COVID-19 pandemic with 46 deaths; more than 2,300 cases

Provincial health officer Dr. Bonnie Henry provides COVID-19 update

Fossil finds at Mt. Stephen. (Photo: Sarah Fuller/Parks Canada)
Extreme hiking, time travel and science converge in the Burgess Shale

Climb high in the alpine and trace your family tree back millions of years – to our ocean ancestors

Kettle bells sit aligned in an indoor fitness studio. (PIxabay.com)
1 COVID-19 case at a B.C. fitness studio leads to 104 more infections, 6 school exposures

According to case data released by Fraser Health, one case of the novel coronavirus carries a big impact

Vehicles drive past a display thanking essential workers in Burnaby, B.C. on Sunday, Nov. 29, 2020. THE CANADIAN PRESS/Marissa Tiel
B.C. changing COVID-19 case reporting as virus spread continues

Manual counting takes more time, leads to errors

Black Press Media and BraveFace have come together to support children facing life-threatening conditions. Net proceeds from these washable, reusable, three-layer masks go to Make-A-Wish Foundation BC & Yukon.
Put on a BraveFace: Mask fundraiser helps make children’s wishes come true

From Black Press Media + BraveFace – adult, youth and kid masks support Make-A-Wish Foundation

Christy Jordan-Fenton is the co-author of the book Fatty Legs, which has been mentioned amid the controversy of an Abbotsford school assignment on residential schools.
Co-author of residential schools book condemns controversial Abbotsford class assignment

Children’s book mentioned amid controversy at W. A. Fraser Middle School

Kootenay East MLA Tom Shypitka takes over as energy and mines critic for the B.C. Liberal opposition. Kelowna-Lake Country MLA Norm Letnick (right) moves from health critic to assistant deputy speaker. (Hansard TV)
B.C. Liberals pick critics to take on Horgan’s NDP majority

Interim leader Shirley Bond takes seniors, long-term care

Deputy Prime Minister and Minister of Finance Chrystia Freeland listens to a question from a reporter on the phone during a news conference in Ottawa, Monday, Nov. 30, 2020. THE CANADIAN PRESS/Adrian Wyld
Spending too little worse than spending too much, Freeland says as Canada’s deficit tops $381B

‘The risk of providing too little support now outweighs that of providing too much’

Still from a video surveillance camera of a man alleged to have stolen from several people at knife-point in Chilliwack (Rosedale) early on Nov. 28, 2020. (Facebook)
B.C. man defends his family against intruder, saves neighbour while wielding hockey stick

RCMP looking for footage that captures violent crime spree in Chilliwack

Most Read