CRA loses taxpayer data to Heartbleed bug

Tax agency says 900 social insurance numbers compromised in online privacy breach

The Canada Revenue Agency says the social insurance numbers of 900 taxpayers were stolen last week by someone using the Heartbleed encryption vulnerability before the taxation agency shut down public access to its online services.

It happened over a six-hour period by someone exploiting the vulnerability in many supposedly secure websites that used an open-source encryption system.

The CRA said it will send registered letters to affected taxpayers and will not be emailing them because it doesn’t want fraudsters to use phishing schemes to further exploit the privacy breach.

“I want to express regret to Canadians for this service interruption,” CRA commissioner Andrew Treusch said. “I share the concern and dismay of those individuals whose privacy has been impacted by this malicious act.”

Other personal data and possibly businesses’ information may also have been lost.

“We are currently going through the painstaking process of analyzing other fragments of data, some that may relate to businesses, that were also removed,” Treusch said.

Taxpayers whose data was compromised will get bolstered CRA account protection and free access to credit protection services.

Canada’s Privacy Commissioner is also investigating.

Online services, including the E-file and Netfile online income tax portals, were patched and re-launched Sunday after what the CRA called a vigourous test to ensure they are safe and secure.

The CRA cut off access to those services April 8 as word spread that the Heartbleed bug had given hackers access to passwords, credit card numbers and other information at many websites.

People whose income tax filing was delayed by last week’s CRA interruption have been given until May 5 – beyond the usual April 30 filing deadline – to file returns without being penalized.

The Heartbleed vulnerability, which has existed for two years, compromised secure web browsing at some sites despite the display of a closed padlock that indicates an encrypted connection.

Just Posted

Jill Mackenzie carefully replaces books on the shelves at the Houston Public Library. (Angelique Houlihan photo)
District approves annual library grant

Craft kits featured for summer reading club

The tradition of Houston Christian School grads giving Bibles to incoming kindergarten students will take place this year, but outdoors and in a modified fashion. (File photo)
Houston Christian School grad day is June 24

Grads themselves have set tone for the day, says teacher

Scott Richmond will be starting as the new vice principal for HSS and TSE. (Submitted/Houston Today)
Houston gets a new vice principal

Scott Richmond takes over from Dwayne Anderson who moved to Smithers

A Pacific Salmon Foundation grant of $3,000 is going towards the tree plantations. (Cindy Verbeek photo/Houston Today)
550 trees planted in Houston through A Rocha

Houston Christian School students and volunteers help with the tree planting

Currently the Houston station has 16 paramedics, two ambulances and one community paramedic vehicle. (File photo)
Retirement of longtime paramedics worries Houston community

“No loss of service,” assures BC Emergency Health Services

People line up to get their COVID-19 vaccine at a vaccination centre, Thursday, June 10, 2021 in Montreal. THE CANADIAN PRESS/Ryan Remiorz
Vaccines, low COVID case counts increase Father’s Day hope, but risk is still there

Expert says people will have to do their own risk calculus before popping in on Papa

FILE – A science class at L.A. Matheson Secondary in Surrey, B.C. on March 12, 2021. (Lauren Collins/Surrey Now Leader)
Teachers’ union wants more COVID transmission data as B.C. prepares for back-to-school

BCTF says that details will be important as province works on plan for September

Provincial health officer Dr. Bonnie Henry outlines B.C.’s COVID-19 restart plan, May 25, 2021, including larger gatherings and a possible easing of mandatory masks on July 1. (B.C. government photo)
B.C. records 120 new COVID-19 cases, second vaccines accelerating

Lower Pfizer deliveries for early July, Moderna shipments up

A Heffley Creek peacock caught not one - but two - lifts on a logging truck this month. (Photo submitted)
Heffley Creek-area peacock hops logging trucks in search of love

Peacock hitched two lifts in the past month

The Calgary skyline is seen on Friday, Sept. 15, 2017. THE CANADIAN PRESS/Jeff McIntosh
2 deaths from COVID-19 Delta variant in Alberta, 1 patient was fully immunized

Kerry Williamson with Alberta Health Services says the patients likely acquired the virus in the hospital

The first suspension bridge is the tallest in Canada, with a second suspension bridge just below it. The two are connected by a trail that’s just over 1 km. (Claire Palmer photo)
PHOTOS: The highest suspension bridges in Canada just opened in B.C.

The Skybridge in Golden allows visitors to take in views standing at 130 and 80 metres

BC Green Party leader and Cowichan Valley MLA Sonia Furstenau introduced a petition to the provincial legislature on Thursday calling for the end of old-growth logging in the province. (File photo)
BC Green leader Furstenau introduces old-growth logging petition

Party calls for the end of old-growth logging as protests in Fairy Creek continue

B.C. Premier John Horgan leaves his office for a news conference in the legislature rose garden, June 3, 2020. (B.C. government photo)
B.C. premier roasted for office budget, taxing COVID-19 benefits

Youth addiction law that triggered election hasn’t appeared

A vial containing the Moderna COVID-19 vaccine is shown at a vaccination site in Marcq en Baroeul, outside Lille, northern France, Saturday, March 20, 2021. THE CANADIAN PRESS/AP/Michel Spingler
mRNA vaccines ‘preferred’ for all Canadians, including as 2nd dose after AstraZeneca: NACI

New recommendations prioritizes Pfizer, Moderna in almost all cases

Most Read