The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

The route of the pink parade. The Record has blackened out the name of the teen. Facebook photo.
Pink-vehicle parade to be held Sunday in support of transgender teen assaulted in Mission

Teen and family to watch parade drive single file along waterfront at 3 p.m., Jan. 17

Prolific offender Jonathan David Olson (left) and Brodie Tyrel Robinson, both of Chilliwack, were convicted of several offences in BC Supreme Court in August 2019 in connection to a crime spree on the Canada Day long weekend in 2017.
Chilliwack gangster sentenced to 11.5 years in prison for 2017 crime spree

Jonathan Olson involved in shooting a fellow crime associate in the head

Pete Ryan, known all over the world for his chainsaw carvings, died on Friday, Jan. 8. He was 70 years old. (Contributed Photo/Dignity Memorial)
Iconic Hope chainsaw carver Pete Ryan has passed away

Ryan is a founding member of Hope’s famous chainsaw carving community

Screenshot from video.
2 students arrested in assault of transgender girl at Mission middle school

Mother said daughter was targeted because of how she identifies

(THE CANADIAN PRESS/Nathan Denette)
Seabird Island to receive COVID-19 vaccine in the coming weeks

All members 18 years and older will be eligible to be vaccinated

A woman wears a face mask and shield to curb the spread of COVID-19 while walking in North Vancouver, B.C., on Wednesday, January 6, 2020. THE CANADIAN PRESS/Darryl Dyck
536 COVID cases, 7 deaths reported as B.C. finds its first case of South African variant

Henry said 69,746 people have received their first dose of the COVID vaccine.

Two toucans sit on tree at an unidentified zoo. (Pixabay.com)
BC SPCA calls for ban on exotic animal trade after 50 parrots, toucans pass through YVR

One toucan was found dead and several others were without food

Prime Minister Justin Trudeau listens to a question during a news conference outside Rideau cottage in Ottawa, Friday, January 8, 2021. THE CANADIAN PRESS/Adrian Wyld
Trudeau says Canada’s COVID vaccine plan on track despite Pfizer cutting back deliveries

Canadian officials says it will still likely receive four million doses by the end of March

Alan Davidson was sentenced to almost six years for abusing seven boys in the late 1970s and early 1990s. (Canadian Press file)
Full parole granted to former Mountie, sports coach convicted of sex abuse of boys

Alan Davidson convicted of abusing boys in B.C. and Saskatchewan in late ’70s, early ’90s

The first COVID-19 vaccine arrives in B.C. in temperature-controlled containers, Dec. 13, 2020. (B.C. government)
More vaccine arrives as B.C. struggles with remote COVID-19 cases

Long-term care homes remain focus for public health

The first Pfizer-BioNTech COVID-19 vaccine dose in Canada is prepared at The Michener Institute in Toronto on Monday, Dec. 14, 2020. THE CANADIAN PRESS/Frank Gunn
Doses of COVID-19 vaccine expected in 60 B.C. First Nations by next week

B.C. has allocated 25,000 doses of COVID-19 vaccine to First Nations for distribution by the end of February

Kamloops-South Thompson MLA Todd Stone questions the NDP government in the B.C. legislature, Feb. 25, 2020. (Hansard TV)
Todd Stone says he’s not running for B.C. Liberal leadership

Kamloops MLA was widely viewed as a front-runner

Wireless voice and data services are out for those on Telus as of Thursday (Jan. 14) afternoon across Western Canada, Telus Support said in a recent Tweet. (Black Press file photo)
UPDATE: Telus services restored across Western Canada

Telus said they are monitoring the situation to ensure connections remain stable

Most Read