The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Just Posted

(Advocate file photo)
Red Deer down to 102 active COVID-19 cases

Central zone has 332 cases with 26 in hospital and five in ICU

Flora Northwest was taken to the Ermineskin residential school when she was six years old. (Emily Jaycox/Ponoka News)
Ermineskin residential school survivor: ‘It just brings me back to the cries at night’

Discovery in Kamloops of remains of 215 children a painful time for survivors

Maskwacis Pride crosswalk (Left to right): Montana First Nation Councillor Reggie Rabbit, Samson Cree Nation Councillor Louise Omeasoo, Samson Cree Nation Councillor Katherine Swampy, Samson Cree Nation Councillor Shannon Buffalo, Samson Cree Nation Chief Vern Saddleback.
Pride in Maskwacis

The 4th inaugural Maskwacis Pride crosswalk painting took place on Saturday 12, 2020.

The Government of Alberta identified 115 new COVID-19 cases Sunday, bringing the provincial total to 3,089.
(Black Press file photo)
Red Deer COVID cases continue to fall

114 cases in Red Deer, down one from Saturday

Lorne Fundytus. (Emily Jaycox/Ponoka News)
OUR COMMUNITY: Rimoka Housing Foundation has a new CAO

Rimoka Housing Foundation (RHF) has a new, yet familiar, face to fill… Continue reading

People watch a car burn during a riot following game 7 of the NHL Stanley Cup final in downtown Vancouver, B.C., in this June 15, 2011 photo. THE CANADIAN PRESS/Geoff Howe
10 years ago: Where were you during the 2011 Vancouver Stanley Cup Riots?

Smashed-in storefronts, looting, garbage can fires and overturned cars some of the damage remembered today

(Black Press Media file)
Dirty money: Canadian currency the most germ-filled in the world, survey suggests

Canadian plastic currency was found to contain 209 bacterial cultures

A worker, at left, tends to a customer at a cosmetics shop amid the COVID-19 pandemic Thursday, May 20, 2021, in Los Angeles. (AP Photo/Marcio Jose Sanchez)
Half of cosmetics sold in Canada, U.S. contain toxic chemicals: study

Researchers found that 56% of foundations and eye products contain high levels of fluorine

(Photo submitted)
RV fire in Riverside, Ponoka quickly extinguished

A fire that set a motor home in Riverside ablaze from an… Continue reading

Annamie Paul, leader of the Green Party of Canada, speaks at a news conference on Parliament Hill in Ottawa, on June 10, 2021. THE CANADIAN PRESS/Justin Tang
Green Leader Annamie Paul facing no-confidence motion from party brass

move follows months of internal strife and the defection of MP Jenica Atwin to the Liberals

Tulips bloom in front of the Supreme Court of Canada in Ottawa, Thursday, May 10, 2018. Day two of a full week of scheduled hearings will be heard in Federal Court today on a case involving Indigenous children unnecessarily taken into foster care by what all parties call Canada’s “broken child welfare system.” THE CANADIAN PRESS/Sean Kilpatrick
AFN slams Ottawa for ‘heartless’ legal challenge of First Nations child compensation

2019 decision awarded $40,000 to each Indigenous child removed before 2006

A health-care worker holds up a sign signalling she needs more COVID-19 vaccines at the ‘hockey hub’ mass vaccination facility at the CAA Centre during the COVID-19 pandemic in Brampton, Ont., on Friday, June 4, 2021. This NHL-sized hockey rink is one of CanadaÕs largest vaccination centres. THE CANADIAN PRESS/Nathan Denette
‘Vaxxed to the max’: Feds launch Ask an Expert campaign to encourage COVID shots

Survey shows that confidence in vaccines has risen this spring

Children’s shoes and flowers are shown after being placed outside the Ontario legislature in Toronto on Monday, May 31, 2021. THE CANADIAN PRESS/Frank Gunn
Ontario commits $10 million to investigate burial sites at residential schools

Truth and Reconciliation Commission identified 12 locations of unmarked burial sites in Ontario

Two hundred and fifteen lights are placed on the lawn outside the Residential School in Kamloops, B.C., Saturday, June, 13, 2021. The remains of 215 children were discovered buried near the former Kamloops Indian Residential School earlier this month. THE CANADIAN PRESS/Jonathan Hayward
Days after Kamloops remains discovery, Tk’emlups families gather to unite, move ahead

‘We have to work together because this is going to be setting a precedent for the rest of the country’

Most Read