The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

The property on which a residential school (pictured) that was torn down years ago in Lower Post is to be the location of a cultural centre. (Indian Residential School History and Dialogue Centre photo)
Lower Post residential school building to be demolished, replaced with cultural centre

Project to be funded by federal and provincial governments, Daylu Dena Council

The Cancer Care Unit at Prince Rupert Regional Hospital, April 14, will benefit from a $100,000 donation from Prince Rupert Port Authority towards renovations. (Photo: K-J Millar/The Northern View)
Prince Rupert Port Authority donates $100,000 to hospital renovations

Cancer Care Unit at PRRH to undergo upgradesat PRRH to undergo upgrades

Teresa Van sorts bottles at the April 10 Rainmakers Interact Club bottle drive to earn funds for six Seabin garbage collection units for harbours and waterfronts in the local region. (Photo: K-J Millar/The Northern View)
Bottle drive successful with more collected than can be sorted in one day

Rainmakers Interact Club supports local community with funds toward ocean garbage collection units

Flights are to resume to Prince Rupert and Sandspit airports under an Air Canada and federal government $5.9 billion agreement that was reached on April 12. A plane is seen through the window on the tarmac of Vancouver International Airport as the waiting room is empty Tuesday, June 9, 2020. (THE CANADIAN PRESS/Jonathan Hayward)
$5.879 billion agreement between Air Canada and Fed’s will assist YPR in re-opening

Prince Rupert Regional Airport to reopen flights by June 1st, if not earlier

BC Housing townhouses on Kootenay Ave. were demolished during March to make way for new affordable residential units by Prince Rupert Indigenous Housing Society. (Photo: K-J Millar/The Northern View)
Despite a recent reduction in units project will still be able to house many

Prince Rupert Indigenous Housing Society says 60 units is still the plan

A woman wears a protective face covering to help prevent the spread of COVID-19 as she walks past the emergency entrance of Vancouver General Hospital in Vancouver, B.C., Friday, April 9, 2021. COVID-19 cases have been on a steady increase in the province of British Columbia over the past week. THE CANADIAN PRESS/Jonathan Hayward
Top doctor warns B.C.’s daily cases could reach 3,000 as COVID hospitalizations surge

There are more than 400 people in hospital, with 125 of them in ICU

The father of Aaliyah Rosa planted a tree and laid a plaque in her memory in 2018. (Langley Advance Times files)
Final witness will extend Langley child murder trial into May or June

Lengthy trial began last autumn with COVID and other factors forcing it to take longer than expected

The corner of 96th Avenue and Glover Road in Fort Langley now has traffic signals, and new “touchless” signal activation buttons. (Matthew Claxton/Langley Advance Times)
Busy Fort Langley intersection gets ‘touchless’ crosswalk signals

The new traffic light started operation in April

A crossing guard stops traffic as students wearing face masks to curb the spread of COVID-19 arrive at Ecole Woodward Hill Elementary School, in Surrey, B.C., on Tuesday, February 23, 2021. A number of schools in the Fraser Health region, including Woodward Hill, have reported cases of the B.1.7.7 COVID-19 variant first detected in the U.K. THE CANADIAN PRESS/Darryl Dyck
COVID-infected students in Lower Mainland schools transmitting to 1 to 2 others: data

Eight to 13 per cent of COVID cases among students in the Lower Mainland were acquired in schools, B.C. says

Norm Scott, president of Royal Canadian Legion Branch # 91, is disappointed the Legion does not qualify for COVID financial assistance from the provincial government. (Black Press Media file photo)
B.C.’s pandemic aid package passing Legion branches by

Federal non-profit status stymies provincial assistance eligibility

Latest modelling by public health shows cases generated by COVID-19 infections into places where it can spread quickly. (B.C. Centre for Disease Control)
Industrial sites, pubs, restaurants driving COVID-19 spread in B.C.

Infection risk higher in offices, retail, warehouses, farms

Vancouver Canucks forward J.T. Miller said it would be “very challenging and not very safe” for him and his teammates to play as scheduled on Friday. THE CANADIAN PRESS/Darryl Dyck
Canucks’ return to ice postponed again after players voice COVID health concerns

Friday’s game against the Edmonton Oilers was called off after the team met virtually with the NHLPA

B.C. Attorney General David Eby, Minister Responsible for Housing. THE CANADIAN PRESS/Chad Hipolito
B.C. announces $2B for affordable, middle-income family home projects

HousingHub financing to encourage more developers, groups – with low-interest loans – to build affordable homes

Most Read