CRA loses taxpayer data to Heartbleed bug

Tax agency says 900 social insurance numbers compromised in online privacy breach

The Canada Revenue Agency says the social insurance numbers of 900 taxpayers were stolen last week by someone using the Heartbleed encryption vulnerability before the taxation agency shut down public access to its online services.

It happened over a six-hour period by someone exploiting the vulnerability in many supposedly secure websites that used an open-source encryption system.

The CRA said it will send registered letters to affected taxpayers and will not be emailing them because it doesn’t want fraudsters to use phishing schemes to further exploit the privacy breach.

“I want to express regret to Canadians for this service interruption,” CRA commissioner Andrew Treusch said. “I share the concern and dismay of those individuals whose privacy has been impacted by this malicious act.”

Other personal data and possibly businesses’ information may also have been lost.

“We are currently going through the painstaking process of analyzing other fragments of data, some that may relate to businesses, that were also removed,” Treusch said.

Taxpayers whose data was compromised will get bolstered CRA account protection and free access to credit protection services.

Canada’s Privacy Commissioner is also investigating.

Online services, including the E-file and Netfile online income tax portals, were patched and re-launched Sunday after what the CRA called a vigourous test to ensure they are safe and secure.

The CRA cut off access to those services April 8 as word spread that the Heartbleed bug had given hackers access to passwords, credit card numbers and other information at many websites.

People whose income tax filing was delayed by last week’s CRA interruption have been given until May 5 – beyond the usual April 30 filing deadline – to file returns without being penalized.

The Heartbleed vulnerability, which has existed for two years, compromised secure web browsing at some sites despite the display of a closed padlock that indicates an encrypted connection.

Just Posted

VIDEO: Langley realtor builds holiday party for kids

Realtor Matthew Rufh hosted a gingerbread house-building party for the Langley Boys and Girls Club.

Giants defenceman Byram headed to NHL prospects game

The young player is following in the footsteps of former Giant Ty Ronning.

Langley Rams receiver inks with BC Lions

Jevon Cottoy joined the Rams this season and now has a multi-year contract with the Lions.

UPDATE: Heavy rainfall, strong winds in forecast for Lower Mainland

Heavy rains, snow expected till Friday morning

McGregor Says: Shopping husbands will survive

Columnist Jim McGregor offers a little advise to those husbands required to go Christmas shopping.

UPDATE: B.C. businesses evacuated due to emailed bomb threat, also received in U.S.

Penticton and Comox Valley businesses evacuated Thursday morning

Lions announce seven members of coaching staff not coming back for 2019

The operational moves come two days after the Lions announced DeVone Claybrooks as the team’s new head coach

Omar Khadr wants changes to bail conditions

‘My life is held in suspension’, says the former Guantanamo Bay detainee

Christmas fun at Aldergrove Library: VIDEO & PHOTOS

Youngsters enjoyed decorating a Christmas tree with their homemade craft decorations

$12K awarded to atheist family who oppose Christmas, Hanukkah in B.C. classroom

Gary Mangel,May Yasue said holidays, Remembrance Day and Valentine’s Day not appropriate in preschool

Kodiaks avenge themselves against Pilots: ACTION PHOTOS

Aldergrove and Abbotsford Junior B hockey teams tie game at 5-5

Coach accused of sexual assault says apology letter was misinterpreted

Dave Brubaker has pleaded not guilty to one count of sexual assault and one count of invitation to sexual touching

Give the gift of nature this holiday season

Please don’t be mad, but I bought you a moose

Aboriginal poet faces backlash for calling out NHL-themed totem poles

Rebecca Thomas says she received backlash for asking a drugstore chain to remove NHL merchandise

Most Read