CRA loses taxpayer data to Heartbleed bug

Tax agency says 900 social insurance numbers compromised in online privacy breach

The Canada Revenue Agency says the social insurance numbers of 900 taxpayers were stolen last week by someone using the Heartbleed encryption vulnerability before the taxation agency shut down public access to its online services.

It happened over a six-hour period by someone exploiting the vulnerability in many supposedly secure websites that used an open-source encryption system.

The CRA said it will send registered letters to affected taxpayers and will not be emailing them because it doesn’t want fraudsters to use phishing schemes to further exploit the privacy breach.

“I want to express regret to Canadians for this service interruption,” CRA commissioner Andrew Treusch said. “I share the concern and dismay of those individuals whose privacy has been impacted by this malicious act.”

Other personal data and possibly businesses’ information may also have been lost.

“We are currently going through the painstaking process of analyzing other fragments of data, some that may relate to businesses, that were also removed,” Treusch said.

Taxpayers whose data was compromised will get bolstered CRA account protection and free access to credit protection services.

Canada’s Privacy Commissioner is also investigating.

Online services, including the E-file and Netfile online income tax portals, were patched and re-launched Sunday after what the CRA called a vigourous test to ensure they are safe and secure.

The CRA cut off access to those services April 8 as word spread that the Heartbleed bug had given hackers access to passwords, credit card numbers and other information at many websites.

People whose income tax filing was delayed by last week’s CRA interruption have been given until May 5 – beyond the usual April 30 filing deadline – to file returns without being penalized.

The Heartbleed vulnerability, which has existed for two years, compromised secure web browsing at some sites despite the display of a closed padlock that indicates an encrypted connection.

Just Posted

Young people graduating in COVID-19 times have shown resilience. (Stock photo)
Editorial: Class of 2021 has shown smarts and resilience

Congratulations and good luck to Grade 12s who have persevered during the pandemic

The Nanaimo Business Awards are accepting nominations now. (Greater Nanaimo Chamber of Commerce image)
Nanaimo Business Awards accepting nominations of worthy winners

This year’s awards aren’t until the fall, but the nomination period ends June 28

Retailers say they’re ready for the ban on single-use plastic checkout bags in Nanaimo when it takes effect July 1. (Chris Bush/News Bulletin)
Retailers report they’re ready for Nanaimo’s single-use checkout bag ban

Business operators say there’s been plenty of time to plan and prepare for bylaw that kicks in July 1

Nanaimo Fire Rescue crews on scene at a boat fire near the boat ramp at Long Lake on Sunday, June 20. (Greg Sakaki/News Bulletin)
Boat burns up on Nanaimo’s Long Lake, man and child unhurt

Jet skiers attempt to put out fire by circling around to spray water on burning boat

The border crossing into the United States is seen during the COVID-19 pandemic in Lacolle, Que. on February 12, 2021. THE CANADIAN PRESS/Paul Chiasson
VIDEO: Border quarantine to soon lift for fully vaccinated Canadians

Eligible travellers must still take multiple COVID-19 tests

Chilliwack secondary school’s principal is apologizing after a quote equating graduation with the end of slavery in the U.S. was included in the 2020-2021 yearbook. (Screenshot from submitted SnapChat)
B.C. student’s yearbook quote equates grad to end of slavery; principal cites editing error

Black former student ‘disgusted’ as CSS principal apologizes for what is called an editing error

Skeena MLA Ellis Ross. (Photo by Peter Versteege)
BC Liberal leadership candidate condemns ‘senseless violence’ of Okanagan church fires

Skeena MLA Ellis Ross says reconciliation isn’t about revenge for past tragedies

COVID-19 daily cases reported to B.C. public health, seven-day moving average to June 17, 2021. (B.C. Centre for Disease Control)
B.C.’s COVID-19 infections drop to 90 on Sunday, 45 Monday

Pandemic spread dwindles as 77% of adults receive vaccine

John A. Read, who was inspired to leave his former career to become a professional astronomer by the purchase of a $13 telescope, will give beginning astronomers key pointers on how to set up and get the best performance from their instruments at Nanaimo Astronomy Society’s meeting June 24. (Photo courtesy Jennifer Read)
Astrophysicist will talk about getting the most out of a telescope at Nanaimo astronomy meeting

John Read’s purchase of a $13 telescope led to a degree in astrophysics and a career in astronomy

Emergency vehicles are parked outside of the Wintergreen Apartments on Fourth Avenue. (SUSAN QUINN / Alberni Valley News)
Port Alberni RCMP investigate stabbing on Fourth Avenue

Two men were found with ‘significant’ injuries near Wintergreen Apartments

A coroner’s inquest will be taking place at the Capitol Theatre in Port Alberni for the next week. (ELENA RARDON / ALBERNI VALLEY NEWS)
Teen B.C. mom who died following police custody recalled as ‘friend to many’

Police sent Jocelyn George to hospital after intoxication had gone ‘beyond the realm’ of normal detox

FILE - In this Nov. 29, 2020, file photo, Las Vegas Raiders defensive end Carl Nassib leaves the field after an NFL football game against the Atlanta Falcons in Atlanta. Nassib on Monday, June 21, 2021, became the first active NFL player to come out as gay. Nassib announced the news on Instagram, saying he was not doing it for the attention but because “I just think that representation and visibility are so important.” (AP Photo/John Bazemore, File)
Nassib becomes first active NFL player to come out as gay

More than a dozen NFL players have come out as gay after their careers were over

Penticton Indian Band Chief Greg Gabriel speaks to the Sacred Hearts Catholic Church burning down early Monday morning, June 21, 2021. (Monique Tamminga Western News)
Penticton band chief condemns suspicious burning of 2 Catholic churches

Both Catholic church fires are deemed suspicious, says RCMP

Most Read