The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Just Posted

Stettler County
County of Stettler approves projects during May 12th council meeting

County council has authorized some funds for projects this summer

Stettler County
County of Stettler holds public hearings for proposed bylaws

A bylaw to amend the Land Use Bylaw for recreational vehicle uses generated many responses from the public

Asymptomatic testing will now be available for "priority groups" who are most likely to spread the COVID-19 virus to vulnerable or at-risk populations. File photo by THE CANADIAN PRESS
Alberta adds 1,195 new COVID-19 cases Saturday

Red Deer has dropped to 760 active cases

Alberta’s chief medical officer of health Dr. Deena Hinshaw is asking Albertans to do their part by observing gathering limits, staying home if unwell, wearing masks and maintaining physical distance. (Photo by Chris Schwarz/Government of Alberta)
Three new Central zone COVID-19 deaths, Alberta adds 1,433 cases

Red Deer down to 802 active cases of COVID-19

Marc Kielburger, screen left, and Craig Kielburger, screen right, appear as witnesses via video conference during a House of Commons finance committee in the Wellington Building in Ottawa on Tuesday, July 28, 2020. The committee is looking into Government Spending, WE Charity and the Canada Student Service Grant. THE CANADIAN PRESS/Sean Kilpatrick
Trudeau didn’t violate conflict rules over WE Charity, watchdog says

Federal ethics commissioner Mario Dion found that former finance minister Bill Morneau did violate the rules

A vial of AstraZeneca vaccine is seen at a mass COVID-19 vaccination clinic in Calgary, Alta., Thursday, April 22, 2021. Dr. Ben Chan remembers hearing the preliminary reports back in March of blood clots appearing in a handful of European recipients of the Oxford-AstraZeneca COVID-19 vaccine. THE CANADIAN PRESS/Jeff McIntosh
Science on COVID, VITT constantly changing: A look at how doctors keep up

While VITT can represent challenges as a novel disorder, blood clots themselves are not new

Welcoming cowboy boots at the historic and colourful Last Chance Saloon in the ghost town of Wayne near Drumheller, Alta., on Thursday, Sept. 19, 2019. The bar and hotel are up for sale. THE CANADIAN PRESS/Jeff McIntosh
‘It was a going concern’: Remaining bar and hotel in Alberta coal ghost town for sale

The historic Last Chance Saloon in the ghost town of Wayne in southern Alberta is up for sale

Chief Public Health Officer Theresa Tam listens to a question during a news conference, in Ottawa. THE CANADIAN PRESS/Adrian Wyld
Restrictions will lift once 75% of Canadians get 1 shot and 20% are fully immunized, feds say

Federal health officials are laying out their vision of what life could look like after most Canadians are vaccinated against COVID-19

Chris Scott, owner of The Whistle Stop Cafe, was put in handcuffs after an anti-restriction protest Saturday in the parking lot of the business. (Screenshot via The Whistle Stop Facebook page)
Alberta RCMP investigating possible threat to police after Mirror rally

Online images show RCMP members, vehicles in crosshairs of a rifle

An Israeli attack helicopter launches flares as he flies over the Israeli Gaza border, southern Israel, Thursday, May 13, 2021. (AP Photo/Ariel Schalit)
Singh calls for halt on Canadian arms sales to Israel as violence escalates in region

Government data shows Canada sent $13.7 million in military goods and technology to Israel in 2019

New homes are built in a housing construction development in the west-end of Ottawa on Thursday, May 6, 2021. THE CANADIAN PRESS/Sean Kilpatrick
Budget’s foreign-homebuyers tax could bring in $509 million over 4 years, PBO says

Liberals are proposing a one per cent tax on vacant homes owned by foreign non-residents

A Canadian flag patch is shown on a soldier’s shoulder in Trenton, Ont., on Thursday, Oct. 16, 2014. The Canadian Forces says it has charged one of its members in the death of an army reservist from British Columbia during a training exercise at a military base in Alberta last year. THE CANADIAN PRESS/Lars Hagberg
Canadian Forces member charged in death of army reservist during training exercise

Cpl. Lars Callsen has been charged with one count of negligence

Most Read