The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Kevin Lee Barrett is charged with attempted murder and aggravated assault. (Facebook)
Court hears of victim’s injuries in West Kelowna attempted murder trial

Two-week-long trial continues for Kevin Barrett, accused of trying to kill mother in West Kelowna

Homeless man lying on the bench. (File photo)
Temporary emergency shelter opens in Kelowna

The shelter, located at the former location of Tree Brewing, will offer 38 beds

Interior Health reported 91 new COVID-19 cases in the region Jan. 20, 2021 and three additional deaths. (Jennifer Smith - Morning Star)
95 new COVID-19 cases in Interior Health, two deaths

Another member of Vernon’s Noric House has passed

Robert Riley Saunders. (File)
Disgraced Kelowna social worker faces another class-action lawsuit

Zackary Alphonse claims he was not informed of resources available to him upon leaving government care

Money and drugs seized. (Kelowna RCMP)
Drugs, weapons and $20,000 seized from Kelowna home

One man was released without charge, pending further investigation

Businesses continue to struggle under COVID-19 restrictions as the pandemic reaches the one-year mark. (B.C. government)
Another 564 COVID-19 cases, mass vaccine plan coming Friday

15 more deaths, community cluster declared in Williams Lake

A specialized RCMP team is investigating a suspicious trailer, which might have connections to the illicit drug trade, found abandoned outside a Cache Creek motel. (Photo credit: <em>Journal</em> files)
Police probe U-Haul trailer linked to illicit drugs left outside Cache Creek motel

Hazardous materials found inside believed to be consistent with the production of illicit drugs

Premier John Horgan leaves the podium following his first press conference of the year as he comments on various questions from the media in the Press Gallery at B.C. Legislature in Victoria, B.C., on Monday, January 13, 2020. THE CANADIAN PRESS/Chad Hipolito
Interprovincial travel restrictions a no-go, Horgan says after reviewing legal options

The B.C. NDP government sought legal advice as concerns of travel continue

A mother hold hands with her daughter while sharing about her struggles with addiction during Overdose Awareness Day. (Jesse Major/Black Press file)
Overdose and suicide support group starts in Penticton

Penticton was one of the province’s communities hardest hit by the overdose crisis in 2020

The steel mills in the Hamilton waterfront harbour are shown in Hamilton, Ont., on Tuesday, October 23, 2018. THE CANADIAN PRESS/Nathan Denette
Dyer: Stay the course on Carbon pricing

Kristy Dyer has a background in art and physics and consulted for Silicon Valley

Voting is the number one, bare minimum way to have your voice heard by government. (File photo)
Jocelyn’s Jottings: Want to make change? Here are some suggestions

As a citizen you have a voice, you just have to know who to talk to

Hedley residents are advised to not drink the water until a pump in one of its wells is fixed. Photo Andrea DeMeer
Hedley residents under do-not-consume-water order due to arsenic levels

Residents in Hedley remain under a do-not-consume-water order, due to higher than… Continue reading

Cannabis bought in British Columbia (Ashley Wadhwani/Black Press Media)
Is it time to start thinking about greener ways to package cannabis?

Packaging suppliers are still figuring eco-friendly and affordable packaging options that fit the mandates of Cannabis Regulations

Gov. Gen. Julie Payette takes the royal salute from the Guard of Honour as she makes her way deliver the the throne speech, Wednesday, September 23, 2020 in Ottawa. THE CANADIAN PRESS/Fred Chartrand
Gov. Gen. Julie Payette resigns, apologizes for ‘tensions’ at Rideau Hall

Payette, who is the Queen’s representative in Canada, has been the governor general since 2017

Most Read