A person looks at a Canada Revenue Agency homepage in Montreal, Sunday, Aug. 16, 2020, as the COVID-19 pandemic continues in Canada and around the world. THE CANADIAN PRESS/Graham Hughes

A person looks at a Canada Revenue Agency homepage in Montreal, Sunday, Aug. 16, 2020, as the COVID-19 pandemic continues in Canada and around the world. THE CANADIAN PRESS/Graham Hughes

Thousands of CRA and government accounts disabled after cyberattack

Federal authorities scrambling for answers

Federal authorities were scrambling for answers over the weekend after revealing that hackers used thousands of stolen usernames and passwords to fraudulently obtain government services — with the extent of the damage still unclear.

More than 9,000 hijacked accounts that Canadians use to apply for and access federal services have been cancelled after being compromised in what the Treasury Board of Canada described as “credential stuffing” attacks.

“These attacks, which used passwords and usernames collected from previous hacks of accounts worldwide, took advantage of the fact that many people reuse passwords and usernames across multiple accounts,” the federal department said in a statement.

The hacked accounts were tied to GCKey, which is used by around 30 federal departments and allows Canadians to access various services such as employment insurance, veterans’ benefits and immigration applications.

One-third of those accounts successfully accessed services before all of the affected accounts were shut down, said the Treasury Board, which is responsible for managing the federal civil service as well as the public purse.

READ MORE: Twitter racing to unravel mystery cyberattack

Officials are now trying to determine how many of those services were fraudulent.

The GCKey attack included thousands of Canada Revenue Agency accounts, through which Canadians can access their income-tax records and other personal information as well as apply for financial support related to the COVID-19 pandemic.

A total of 5,500 CRA accounts were targeted through the GCKey attack and an earlier “credential stuffing” scheme, the Treasury Board said.

“Access to all affected accounts has been disabled to maintain the safety and security of taxpayers’ information and the Agency is contacting all affected individuals and will work with them to restore access to their CRA MyAccount,” the Treasury Board said in a statement.

The department did not reveal how many of the CRA accounts were compromised or the cost of the suspected fraud, but said federal officials as well as the RCMP and federal privacy commissioner were conducting separate investigations.

It also did not say how Canadians in receipt of services such as the Canada Child Benefit or Canada Emergency Response Benefit for those affected by COVID-19 would be affected.

Revelations of the GCKey attack follow earlier concerns and reports from some Canadians that they were being targeted by hackers during the pandemic, with some reporting thousands of dollars in CERB payments for which they did not apply.

READ MORE: To get the latest news on Vancouver Island, B.C., Canada and the world delivered to your inbox daily, click here.

The government warned Canadians to use unique passwords for all online accounts and to monitor them for suspicious activity.

The Canadian Anti-Fraud Centre says more than 13,000 Canadians have been victims of fraud totalling $51 million this year. There have been 1,729 victims of COVID-19 fraud worth $5.55 million.

Lee Berthiaume, The Canadian Press

Like us on Facebook and follow us on Twitter 

CanadaCoronaviruscybersecurity

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

The District of Stewart has adopted a strategic plan for 2020/21 with six focus areas. (District of Stewart/Facebook)
Stewart adopts 2020 strategic plan

Economy, community areas of focus

Kendra Willems, seen here Nov. 5, created a Facebook page to help facilitate social supports such as clothing donations in an informal manner that supplements existing supports and charities. (Jake Wray/Terrace Standard)
Skeena Voices | ‘We could all use that kind of goodness’

Kendra Willems, new to Terrace, founds charitable Facebook page

Firefighters work to cool a semi truck engine that caught fire at the corner of Eby St. and Hwy 16 around 12:30 p.m. on Nov. 26
Semi truck engine catches fire in Terrace

Hwy 16 briefly closed between Sande Overpass and Eby St.

Skeena MLA Ellis Ross at his swearing in on Thursday (Nov. 26), with his wife, Tracey, left, mother, Frieda, and grandson, Parker. (Ellis Ross photo)
Ellis Ross sworn in as Skeena MLA

Ceremonies happening virtually rather than all in-person in Victoria

A woman wears a protective face covering to help prevent the spread of COVID-19 as she walks along the seawall in North Vancouver Wednesday, November 25, 2020.THE CANADIAN PRESS/Jonathan Hayward
911 new COVID-19 cases, 11 deaths as B.C. sees deadliest week since pandemic began

Hospitalizations reach more than 300 across the province

Black Press Media and BraveFace have come together to support children facing life-threatening conditions. Net proceeds from these washable, reusable, three-layer masks go to Make-A-Wish Foundation BC & Yukon.
Put on a BraveFace: Help make children’s wishes come true

Black Press Media, BraveFace host mask fundraiser for Make-A-Wish Foundation

More than 60 cm of snow has fallen at Ulkatcho First Nation near Anahim Lake in the Chilcotin since a snowfall warning went into effect Thursday, Nov. 26. (Graham West photo)
VIDEO: More than 60 cm of snowfall in Chilcotin since Thursday, Nov. 26

Graham West of Ulkatcho First Nation captures the scene on video

Screenshot of Pastor James Butler giving a sermon at Free Grace Baptist Church in Chilliwack on Nov. 22, 2020. The church has decided to continue in-person services despite a public health order banning worship services that was issued on Nov. 19, 2020. (YouTube)
2 Lower Mainland churches continue in-person services despite public health orders

Pastors say faith groups are unfairly targeted and that charter rights protect their decisions

A big job: Former forests minister Doug Donaldson stands before a 500-year-old Douglas fir in Saanich to announce preservation of some of B.C.’s oldest trees, July 2019. (B.C. government)
B.C. returning to ‘stand-alone’ forests, rural development ministry

Horgan says Gordon Campbell’s super-ministry doesn’t work

Alexandre Bissonnette, who pleaded guilty to a mass shooting at a Quebec City mosque, arrives at the courthouse in Quebec City on February 21, 2017. THE CANADIAN PRESS/Mathieu Belanger - POOL
Court strikes down consecutive life sentences; mosque shooter has prison term cut

The decision was appealed by both the defence and the Crown

Gold medallists in the ice dance, free dance figure skating Tessa Virtue and Scott Moir, of Canada, pose during their medals ceremony at the 2018 Winter Olympics in Pyeongchang, South Korea, Tuesday, Feb. 20, 2018. THE CANADIAN PRESS/AP-Charlie Riedel
Olympic champions Virtue, Moir and Tewksbury among 114 Order of Canada inductees

Moir and Virtue catapulted to national stardom with their gold-medal performances at the Winter Olympics in 2018

Shoppers line up in front of a shop on Montreal’s Saint-Catherine Street in search of Black Friday deals in Montreal, Friday, Nov. 27, 2020. THE CANADIAN PRESS/Paul Chiasson
Black Friday shopping in a pandemic: COVID-19 closes some stores, sales move online

Eric Morris, head of retail at Google Canada, says e-commerce in Canada has doubled during the pandemic.

School District 27 announced the first confirmed case of COVID-19 this week (Nov. 23) at Lake City Secondary School Williams Lake campus. (Angie Mindus photo - Williams Lake Tribune)
Entire gym class at northern B.C. high school isolating after confirmed COVID case

Contact tracing by Interior Health led to the quarantine

Most Read