The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

An aerial shot of Cedar Valley Lodge this past August, LNG Canada’s newest accommodation for workers. This is where several employees are isolating after a COVID-19 outbreak was declared last Thursday (Nov. 19). (Photo courtesy of LNG Canada)
41 positive COVID-19 cases associated with the LNG Canada site outbreak

Thirty-four of the 41 cases remain active, according to Northern Health

Cases have gone up in Northern Health in the past week, as they have all over B.C. (K-J Millar/Black Press Media)
Northern Health reports new highest number of COVID-19 cases in one day

Nineteen cases were reported to Public Health last Tuesday (Nov. 17)

FILE – British Columbia provincial health officer Dr. Bonnie Henry wears a face mask as she views the Murals of Gratitude exhibition in Vancouver, on Friday, July 3, 2020. THE CANADIAN PRESS/Darryl Dyck
Masks now mandatory in all public indoor and retail spaces in B.C.

Many retailers and businesses had voiced their frustration with a lack of mask mandate before

(Photo courtesy of LNG Canada)
An aerial shot of Cedar Valley Lodge this past August, LNG Canada’s newest accommodation for workers. This is where several employees are isolating after a COVID-19 outbreak was declared Thursday.
COVID-19 outbreak at LNG Canada Project site

14 employees have tested positive for COVID-19 at this time

A B.C. Ambulance Service paramedic wearing a face mask to curb the spread of COVID-19 moves a stretcher outside an ambulance at Royal Columbia Hospital, in New Westminster, B.C., on Sunday, November 29, 2020. THE CANADIAN PRESS/Darryl Dyck
B.C. records deadliest weekend of COVID-19 pandemic with 46 deaths; more than 2,300 cases

Provincial health officer Dr. Bonnie Henry provides COVID-19 update

Black Press Media and BraveFace have come together to support children facing life-threatening conditions. Net proceeds from these washable, reusable, three-layer masks go to Make-A-Wish Foundation BC & Yukon.
Put on a BraveFace: Help make children’s wishes come true

Black Press Media, BraveFace host mask fundraiser for Make-A-Wish Foundation

Christy Jordan-Fenton is the co-author of the book Fatty Legs, which has been mentioned amid the controversy of an Abbotsford school assignment on residential schools.
Fatty Legs co-author responds to Abbotsford class assignment on residential schools

Children’s book mentioned amid controversy at W. A. Fraser Middle School

Kootenay East MLA Tom Shypitka takes over as energy and mines critic for the B.C. Liberal opposition. Kelowna-Lake Country MLA Norm Letnick (right) moves from health critic to assistant deputy speaker. (Hansard TV)
B.C. Liberals pick critics to take on Horgan’s NDP majority

Interim leader Shirley Bond takes seniors, long-term care

Deputy Prime Minister and Minister of Finance Chrystia Freeland listens to a question from a reporter on the phone during a news conference in Ottawa, Monday, Nov. 30, 2020. THE CANADIAN PRESS/Adrian Wyld
Spending too little worse than spending too much, Freeland says as Canada’s deficit tops $381B

‘The risk of providing too little support now outweighs that of providing too much’

Still from a video surveillance camera of a man alleged to have stolen from several people at knife-point in Chilliwack (Rosedale) early on Nov. 28, 2020. (Facebook)
B.C. man defends his family against intruder, saves neighbour while wielding hockey stick

RCMP looking for footage that captures violent crime spree in Chilliwack

Join Black Press Media and Do Some Good
Join Black Press Media and Do Some Good

Pay it Forward program supports local businesses in their community giving

Harbour seals rest on log booms at Flavelle Mill in Port Hardy. With recent announcements the mill will be getting rid of the log booms, Dr. David Rosen sees an opportunity to study how the disappearance of this highly-frequented refuge for the seals will alter their behaviour in Burrard Inlet. (Photo supplied by David Rosen)
What the heck is going on with marine mamals in Vancouver waterways?

UBC researcher asks why they’re returning, and what role we’re playing

Jim Neufeld, 55, was last seen leaving his home in Penticton Jan. 21, 2009. (RCMP photo)
Human remains found off U.S. coast in 2009 identified as Penticton man

Jim Neufeld, 55, was last seen leaving his home in Penticton Jan. 21, 2009

Most Read