CRA loses taxpayer data to Heartbleed bug

Tax agency says 900 social insurance numbers compromised in online privacy breach

The Canada Revenue Agency says the social insurance numbers of 900 taxpayers were stolen last week by someone using the Heartbleed encryption vulnerability before the taxation agency shut down public access to its online services.

It happened over a six-hour period by someone exploiting the vulnerability in many supposedly secure websites that used an open-source encryption system.

The CRA said it will send registered letters to affected taxpayers and will not be emailing them because it doesn’t want fraudsters to use phishing schemes to further exploit the privacy breach.

“I want to express regret to Canadians for this service interruption,” CRA commissioner Andrew Treusch said. “I share the concern and dismay of those individuals whose privacy has been impacted by this malicious act.”

Other personal data and possibly businesses’ information may also have been lost.

“We are currently going through the painstaking process of analyzing other fragments of data, some that may relate to businesses, that were also removed,” Treusch said.

Taxpayers whose data was compromised will get bolstered CRA account protection and free access to credit protection services.

Canada’s Privacy Commissioner is also investigating.

Online services, including the E-file and Netfile online income tax portals, were patched and re-launched Sunday after what the CRA called a vigourous test to ensure they are safe and secure.

The CRA cut off access to those services April 8 as word spread that the Heartbleed bug had given hackers access to passwords, credit card numbers and other information at many websites.

People whose income tax filing was delayed by last week’s CRA interruption have been given until May 5 – beyond the usual April 30 filing deadline – to file returns without being penalized.

The Heartbleed vulnerability, which has existed for two years, compromised secure web browsing at some sites despite the display of a closed padlock that indicates an encrypted connection.

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

COVID-19: Uptick in calls to Haven Society crisis line as restrictions ease

Organization reminds people of their range of services

ICET provides Qualicum Beach with $250K for East Village project

Town expects revitalization plan to attract more developments

COVID-19: Garage sales should follow mass gathering guidelines

City has received variety of queries on the issue

Parksville’s ‘Support Local’ parade celebrates businesses

Approximately 30 vehicles turn out for event

COVID-19: Qualicum Beach man stages concerts for charity out of his garage

Larry MacDougall says reception from neighbours has been heartening

11 new COVID-19 cases in B.C. as top doc urges caution amid ‘encouraging’ low rates

Dr. Bonnie Henry also announced that two care home outbreaks would be declared over

Surrey mayor’s party under fire for ‘sickening’ tweet accusing northern B.C. RCMP of murder

Mayor Doug McCallum says tweet, Facebook post ‘sent out by unauthorized person’

Father’s Day Walk Run for prostate cancer will be virtual event this year throughout B.C.

The annual fundraiser for Prostate Cancer Foundation BC has brought in $2.5 million since 1999

Facing changes together: Your community, your journalists

The COVID-19 pandemic has changed the world in ways that would have… Continue reading

Dr. Bonnie Henry announces official ban on overnight kids’ camps this summer

New ban comes after talking with other provincial health officials across the country, Henry says

Senior man in hospital after unprovoked wolf attack near Prince Rupert

Conservation officers are on site looking for the wolf

VIDEO: NASA astronauts blast off into space on SpaceX rocket

Marks NASA’s first human spaceflight launched from U.S. soil in nearly a decade

‘I knew what he wanted’: Kootenay man spends hours in tree as black bear patrols below

Francis Levasseur is no stranger to the outdoors, but a recent run-in with a bear caused quite a scare

PHOTOS: U.S. cities brace for increasing unrest over police killing of George Floyd

Minnesota Gov. Tim Walz has fully mobilized the state’s National Guard

Most Read