The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

(from l) Fraser-Nicola candidates Jonah Timms (BC Green Party), Jackie Tegart (BC Liberal Party), and Aaron Sumexheltza (BC NDP). The polls have now closed and the counting has started. (Photo credit: Submitted)
Results awaited in Fraser-Nicola as polls have now closed

Counting of advance and election day votes has begun; mail-in votes to be counted starting Nov. 6

Fraser-Nicola BC Liberal Party candidate Jackie Tegart with supporters on the Ashcroft bridge, Oct. 21, 2020. Tegart is the frontrunner in the riding after the initial vote count, with mail-in ballots to be counted starting on Nov. 6. (Photo credit: Barbara Roden)
Liberal incumbent Jackie Tegart holds narrow lead over Aaron Sumexheltza of NDP

Initial count is complete, and mail-in ballots will determine who wins in Fraser-Nicola

NDP headquarters on election night, Oct. 24, 2020. (Katya Slepian/Black Press Media)
ELECTION 2020: Live blog from B.C. party headquarters

BC NDP projected to win majority government – but celebrations will look different this election

B.C. Green Party leader Sonia Furstenau outlines her party's climate action platform at Nanaimo's Vancouver Island Conference Centre earlier this month. (News Bulletin file photo)
Green leader Furstenau declared victor in her home riding on Vancouver Island

Cowichan Valley voters elect freshly minted party leader for her second term

John Horgan has been re-elected the MLA for Langford-Juan de Fuca. (File-Black Press)
Horgan trounces challengers to be re-elected in his Vancouver Island riding

MLA has represented constituency of Langford-Juan de Fuca and its predecessors since 2005

(Image by Ulrike Leone from Pixabay)
QUIZ: A celebration of colour

Fall in British Columbia is a time to enjoy a spectrum of vivid colours

RCMP crest. (Black Press Media files)
Mounties looking for teen boy ‘unlawfully at large’ from Riverview psychiatric hospital

Nolan Godron left the hospital, located at 2721 Lougheed Highway in Coquitlam, without consent on Saturday

The Canadian border is pictured at the Peace Arch Canada/USA border crossing in Surrey, B.C. Friday, March 20, 2020. More than 4.6 million people have arrived in Canada since the border closed last March and fewer than one-quarter of them were ordered to quarantine while the rest were deemed “essential” and exempted from quarantining. THE CANADIAN PRESS/Jonathan Hayward
Majority of international travellers since March deemed ‘essential’, avoid quarantine

As of Oct. 20, 3.5 million travellers had been deemed essential, and another 1.1 million were considered non-essential

Canada’s Chief Public Health Officer Theresa Tam responds to a question during a news conference Friday October 23, 2020 in Ottawa. Canada’s top physician says she fears the number of COVID-19 hospitalizations and deaths may increase in the coming weeks as the second wave continues to drive the death toll toward 10,000. THE CANADIAN PRESS/Adrian Wyld
Canada’s top doctor warns severe illness likely to rise, trailing spike in COVID-19 cases

Average daily deaths from virus reached 23 over the past seven days, up from six deaths six weeks ago

Join Black Press Media and Do Some Good

Pay it Forward program supports local businesses in their community giving

BC Hydro map showing where power has been knocked out is dotted with over a dozen outages. (BC Hydro map screenshot)
Thousands without power in Lower Mainland on election day

One outage in Langley and Surrey is affecting over 4,000 customers

100 Mile Conservation officer Joel Kline gingerly holds an injured but very much alive bald eagle after extracting him from a motorist’s minivan. (Photo submitted)
B.C. driver thought he retrieved a dead bald eagle – until it came to life in his backseat

The driver believed the bird to be dead and not unconscious as it turned out to be

Most Read