The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

More than 700 people have signed a petition requesting tighter regulations on cigarette boats on Shuswap Lake. (Pixabay photo)
Noisy boats stir up Sicamous council

Councillors discuss regulation, supporting new Shuswap and Mara Lakes Decibel Coalition

(Pixabay photo)
Morning Start: Vanilla flavouring contains goo from beaver butts

Your morning start for Friday, May 7, 2021

The Canadian Mental Health Association Shuswap Revelstoke’s homeless outreach coordinator Carly Shipmaker and practicum student Sarena Bryden take a turn on Thursday, May 6 on the stationary bike. They were cycling under the blue sun canopy outside the CMHA thrift shop to promote Mental Health Week and to prepare for this year’s Ride Don’t Hide event in June. (Martha Wickett-Salmon Arm Observer)
Getting the wheels turning for Salmon Arm’s Ride Don’t Hide event

Canadian Mental Health Association awareness and fundraising campaign to run throughout June

Pharmacist Barbara Violo arranges all the empty vials of the Oxford-AstraZeneca COVID-19 vaccines that she has provided to customers at the Junction Chemist which is an independent pharmacy during the COVID-19 pandemic in Toronto, on Monday, April 19, 2021. THE CANADIAN PRESS/Nathan Denette
B.C.’s 1st vaccine-induced blood clot case detected in Interior Health

Interior Health also recorded 52 new cases of COVID-19

Interior Health provided updated data breaking down the vaccine administration totals in communities throughout the region on Monday, May 3, 2021. (File photo)
Nearly 40% of Shuswap adults vaccinated

More than 12,000 people in the Salmon Arm health area received their first COVID-19 vaccine

Protesters attempt to stop clear-cutting of old-growth trees in Fairy Creek near Port Renfrew. (Will O’Connell photo)
VIDEO: Workers, activists clash at site of Vancouver Island logging operation

Forest license holders asking for independent investigation into incident

A worker rides a bike at a B.C. Hydro substation in Vancouver, on Friday, April 16, 2021. THE CANADIAN PRESS/Darryl Dyck
BC Hydro report raises safety concerns as pandemic prompts jump in yard work

Incidents involving weekend tree trimmers, gardeners and landscapers have risen 30% since the pandemic hit

15,000 sleep sacks worth $500,000 will be distributed to mothers and young families in need across Canada. (Contributed)
Kelowna non-profit to distribute $500K-worth of ‘sleep sacks’ across Canada

The sleep sacks were donated to Mamas for Mamas to distribute to mothers in need

Armstrong Elementary School teacher Heather Ramsey, left, presents a card including original printing work she completed in Grade 1 as a student of Helen Sidney’s, right. (SD83)
Retired Armstrong teacher continues tradition of supporting students with $100K donation

Helen Sidney, who taught at AES for 41 years, made an incredible donation ahead of the school’s centennial

The Primary Urgent Care Centre on Martin Street officially opened on March 31, 2021. (Brennan Phillips)
Okanagan-Similkameen Regional Hospital District reverses funding decision on care centre

Approval now granted to fund $1 million for Urgent and Primary Care Centre in Penticton

Motorists breaking travel rules can be fined $230 for failing to follow instructions or $575 if the reason for travel violates the essential travel health order, at this Highway 3 check area near Manning Park. Photo RCMP
RCMP begin checking drivers on BC highways

Four check points are set up Thursday May 6 around the province

Starting Tuesday, May 11, B.C. adults born in 1981 and earlier will be able to register for a vaccine dose. (Haley Ritchie/Black Press Media)
BC adults 40+ eligible to book COVID-19 vaccinations next week

Starting Tuesday, people born in 1981 and earlier will be able to schedule their inoculation against the virus

Kelowna City Hall. (Michael Rodriguez - Capital News)
New temporary outdoor shelter in Kelowna opens

The new area on Richter Street and Weddell Place replaces the Baillie Avenue site

Parks Canada and Tla-o-qui-aht Tribal Parks dig the washed up Princess M out from sand along the south shore of the Pacific Rim National Park Reserve. (Nora O’Malley photo)
Rescue attempt costs man his boat off Pacific Rim National Park Reserve

Coast Guard response questioned after volunteer responder’s speedboat capsizes in heavy swells

Most Read