The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Traffic controllers Hayley Stevens (left) and Hector Blackwater (right) have been recognized by drivers for their friendly waves, smiles and dance moves while working south of Terrace. (Ben Bogstie/Terrace Standard)
Skeena Voices | Positivity is just part of being a flagger

Hector Blackwater and Hayley Stevens have been drawing attention on social media

Skeena MLA Ellis Ross has been named critic for Environment and Climate Change Strategy for the BC Liberals. (Peter Versteege photo)
Skeena MLA Ellis Ross named critic for Environment and Climate Change Strategy

Previously, Ross was the critic for LNG, Resource Opportunities, and Responsible Development

Coast Mountains School District 82 is dealing with a shortage of bus drivers. (Natalia Balcerzak/Terrace Standard)
CMSD82 coping with bus driver shortage in Terrace area

LNG Project, COVID-19 contributing to driver shortage

A B.C. Ambulance Service paramedic wearing a face mask to curb the spread of COVID-19 moves a stretcher outside an ambulance at Royal Columbia Hospital, in New Westminster, B.C., on Sunday, November 29, 2020. THE CANADIAN PRESS/Darryl Dyck
B.C. records deadliest weekend of COVID-19 pandemic with 46 deaths; more than 2,300 cases

Provincial health officer Dr. Bonnie Henry provides COVID-19 update

THE CANADIAN PRESS/Nathan Denette
B.C. researchers launch study to test kids, young adults for COVID-19 antibodies

Kids and youth can often be asymptomatic carriers of the novel coronavirus

Paramedics register patients at a drive through, pop-up COVID-19 test centre outside the Canadian Tire Centre, home of the NHL’s Ottawa Senators, in Ottawa, Sunday, Sept. 20, 2020. A new poll suggests most Canadians aren’t currently worried that people in other countries might get a COVID-19 vaccine first. THE CANADIAN PRESS/Justin Tang
Canadians not worried other countries will get COVID-19 vaccine first: poll

Forty-one per cent of respondents say they want the vaccine to be mandatory for all Canadians

Fossil finds at Mt. Stephen. (Photo: Sarah Fuller/Parks Canada)
Extreme hiking, time travel and science converge in the Burgess Shale

Climb high in the alpine and trace your family tree back millions of years – to our ocean ancestors

Kettle bells sit aligned in an indoor fitness studio. (PIxabay.com)
1 COVID-19 case at a B.C. fitness studio leads to 104 more infections, 6 school exposures

According to case data released by Fraser Health, one case of the novel coronavirus carries a big impact

Vehicles drive past a display thanking essential workers in Burnaby, B.C. on Sunday, Nov. 29, 2020. THE CANADIAN PRESS/Marissa Tiel
B.C. changing COVID-19 case reporting as virus spread continues

Manual counting takes more time, leads to errors

Black Press Media and BraveFace have come together to support children facing life-threatening conditions. Net proceeds from these washable, reusable, three-layer masks go to Make-A-Wish Foundation BC & Yukon.
Put on a BraveFace: Mask fundraiser helps make children’s wishes come true

From Black Press Media + BraveFace – adult, youth and kid masks support Make-A-Wish Foundation

Christy Jordan-Fenton is the co-author of the book Fatty Legs, which has been mentioned amid the controversy of an Abbotsford school assignment on residential schools.
Co-author of residential schools book condemns controversial Abbotsford class assignment

Children’s book mentioned amid controversy at W. A. Fraser Middle School

Kootenay East MLA Tom Shypitka takes over as energy and mines critic for the B.C. Liberal opposition. Kelowna-Lake Country MLA Norm Letnick (right) moves from health critic to assistant deputy speaker. (Hansard TV)
B.C. Liberals pick critics to take on Horgan’s NDP majority

Interim leader Shirley Bond takes seniors, long-term care

Most Read