The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

The Millstone River in Nanaimo. (News Bulletin file photo)
Regional district looks at value of Nanaimo’s natural assets

Report focused on the Millstone River could inform future decisions on corporate asset management

Protesters gather along the Pearson Bridge on Terminal Avenue in downtown Nanaimo last month as part of an event called Worth More Standing. (News Bulletin file photo)
LETTER TO THE EDITOR: B.C. hasn’t managed forests properly

Protesters opposing logging in Fairy Creek speak for many British Columbians, say letter writers

Nanaimo singer Victoria Vaughn recently released an EP with local producer Austin Penner. (Photo courtesy Taylor Murray)
Nanaimo singer and recent VIU grad releases EP about becoming an adult

Victoria Vaughn’s ‘Growing Pains’ recorded with local producer Austin Penner

The B.C. Centre for Disease Control has listed Harbour Air and Air Canada flights to and from Nanaimo, from April 3, 4 and 12, on its list of flights with COVID-19. (News Bulletin file)
COVID-19 cases reported for Air Canada, Harbour Air flights, says disease control centre

Nanaimo flights for April 3, 4 and 12 listed on BCCDC’s list of flights with COVID-19

Rebates through Clean B.C.’s Better Homes New Construction program are available, says the City of Nanaimo. (Vancouver Island University photo)
Energy-efficient home builds in Nanaimo eligible for up to $15K in rebates

All building permits issued on, or after, April 1, 2020 eligible, says City of Nanaimo

Pat Kauwell, a semi-retired construction manager, lives in his fifth-wheel trailer on Maxey Road because that’s what he can afford on his pension, but a Regional District of Nanaimo bylaw prohibits using RVs as permanent dwellings, leaving Kauwell and others like him with few affordable housing options. (Chris Bush/News Bulletin)
Housing crunch or not, it’s illegal to live in an RV in Nanaimo

Regional District of Nanaimo bylaw forcing pensioner to move RV he calls home off private farm land

Deputy Prime Minister and Minister of Finance Chrystia Freeland responds to a question during Question Period in the House of Commons Tuesday December 8, 2020 in Ottawa. The stage is set for arguably the most important federal budget in recent memory, as the Liberal government prepares to unveil its plan for Canada’s post-pandemic recovery even as a third wave of COVID-19 rages across the country. THE CANADIAN PRESS/Adrian Wyld
Election reticence expected to temper political battle over federal budget

Opposition parties have laid out their own demands in the weeks leading up to the budget

Noel Brown, Snuneymuxw First Nation carver, observes the house post he carved, which now is situated in front of the Kw’umut Lelum centre on Centre Street in Nanaimo. (Karl Yu/News Bulletin)
House post representative of work of Kw’umut Lelum in Nanaimo

Snuneymuxw First Nation artist Noel Brown’s carved red cedar house post unveiled Friday, April 16

(Black Press file photo).
Multiple stabbings at Vancouver Island bush party

Three youths hospitalized after an assault in Comox

A syringe is loaded with COVID-19 vaccine at a vaccination clinic run by Vancouver Coastal Health, in Richmond, B.C., Saturday, April 10, 2021. THE CANADIAN PRESS/Jonathan Hayward
B.C. to open up COVID vaccine registration to all B.C. residents 18+ in April

Registration does not equate to being able to book an appointment

Russ Ball (left) and some of the team show off the specimen after they were able to remove it Friday. Photo supplied
Courtenay fossil hunter finds ancient turtle on local river

The specimen will now make its home at the Royal BC Museum

Selina Robinson is shown in Coquitlam, B.C., on Friday November 17, 2017. British Columbia’s finance minister says her professional training as a family therapist helped her develop the New Democrat government’s first budget during the COVID-19 pandemic, which she will table Tuesday. THE CANADIAN PRESS/Darryl Dyck
B.C. finance minister to table historic pandemic-challenged deficit budget

Budget aims to take care of people during pandemic while preparing for post-COVID-19 recovery, Robinson said

Each spring, the Okanagan Fest-of-Ale is held in Penticton. This year, as a result of the COVID-19 pandemic, the festival will not be held. However, beer is still available. How much do you know about this beverage? (pxfuel.com)
QUIZ: How much do you really know about beer?

Put your knowledge to the test with this short quiz

Lord Tweedsmuir’s Tremmel States-Jones jumps a player and the goal line to score a touchdown against the Kelowna Owls in 2019. The face of high school football, along with a majority of other high school sports, could significantly change if a new governance proposal is passed at the B.C. School Sports AGM May 1. (Malin Jordan)
Power struggle: New governance model proposed for B.C. high school sports

Most commissions are against the new model, but B.C. School Sports (BCSS) and its board is in favour

Most Read