The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Monday, Aug. 17, 2020. THE CANADIAN PRESS/Sean Kilpatrick

CRA resumes online services with new security features after cyberattacks

All individuals affected by the cybersecurity breaches will receive a letter from the CRA

The Canada Revenue Agency has resumed all online services after fraudsters used thousands of pilfered usernames and passwords to obtain government services.

The agency disabled the services Saturday after discovering more than 5,000 accounts had been the target of three cyberattacks.

Online access to “My Business Account” resumed Monday and all others were brought back online Wednesday evening.

The agency says it regrets the impacts on Canadians and has modified all its security systems to protect against future cyberattacks.

All individuals affected by the cybersecurity breaches will receive a letter from the CRA explaining how to confirm their identity in order to protect and restore access to their account.

The agency urges everyone using its online services to update their accounts with unique passwords they don’t use for any other purpose.

It also recommends all CRA “My Account” users enable email notifications as an additional measure of security.

They can also opt to use a new security feature that will allow them to set up a unique personal identification number to open an account.

About 5,600 CRA accounts were targeted in what the CRA has described as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ CRA accounts.

The first of three attacks last week took aim at the GCKey service, which is used by about 30 federal departments and allows Canadians to access services like the My Service Canada account.

By using the previously stolen usernames and passwords, the perpetrators were able to fraudulently acquire about 9,000 of the some 12 million GCKey accounts.

Separately, CRA’s system was hit by credential stuffing attacks. The perpetrators were able to use previously hacked credentials to access the CRA portal. They were also able to exploit a vulnerability that allowed them to bypass the CRA security questions and get into thousands more accounts.

In addition, the CRA portal was directly targeted with a large amount of traffic trying to attack the services through credential stuffing.

The Canadian Press

Canadacybersecurity

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Vernon’s Barb and Denis Murdoch, pictured at Lake Louise in 1987, will be inducted into the builder category of the B.C. Volleyball Hall of Fame, Class of 2021, on Feb. 15. (Murdoch family photo)
Vernon volleyball couple earn Hall of Fame call

Denis and Barb Murdoch will be inducted into B.C. Volleyball Hall of Fame in builder category

(File)
Overwhelming support for Vernon businesses this holiday season: Chamber

Vernon chamber urges shoppers to keep dollars local amid pandemic with #voteVernon campaign

Vernon Fire Rescue Services responded to reports of a structure fire on Valleyview Place Jan. 26, 2021. (Brendan Shykora - Vernon Morning Star)
Fire snuffed in Vernon home

No visible smoke, flames from area of reported structure fire

Vernon’s Noric House long-term care facility is dealing with a COVID-19 outbreak. (Jennifer Smith - Morning Star)
Another death linked to COVID-19 outbreak at Vernon care home

It’s the sixth death at Noric House related to the virus to date

Design rendering for the proposed Coldstream Community Centre. An advisory committee will make a decision on the latest site plan Tuesday, Jan. 26, 2021. (Sahuri & Associates rendering)
Coldstream committee to review latest designs for new community centre

Design renderings have been released for the centre that would add 84 local child care spaces

Dr. Penny Ballem, a former deputy health minister, discusses her role in leading B.C.’s COVID-19 vaccination program, at the B.C. legislature, Jan. 22, 2021. (B.C. government)
B.C. holds steady with 407 new COVID-19 cases Tuesday

14 deaths, no new outbreaks in the health care system

A Cessna 170 airplane similar to the one pictured above is reported to be missing off the waters between Victoria and Washington State. Twitter photo/USCG
Canadian, American rescue crews searching for missing aircraft in waters near Victoria

The search is centered around the waters northeast of Port Angeles

Kevin Lee Barrett pleaded guilty to the aggravated assault of his mother Eleanor Holmes on Tuesday, Jan. 26. (File)
West Kelowna man who beat his mom could be sentenced up to 9 years

Kevin Barrett entered a surprise guilty plea to the lesser charge of aggravated assault on Tuesday morning

Interior Health reported two more COVID-19 deaths at Sunnybank Retirement Center in Oliver Tuesday, Jan. 26, 2021. (File photo)
COVID-19 claims lives of two more South Okanagan care home residents

Five residents of the Oliver care home have died since the outbreak was first declared

11 more cases of COVID-19 have been linked to a cluster on Big White Mountain. Pictured above is TELUS park at Big White Ski Resort, Jan. 26. (Big White Ski Resort)
11 more cases of COVID-19 linked to Big White cluster

This brings the total case count to 225, according to health authorities in a Tuesday update

Jonathon Muzychka and Dean Reber are wanted on Canada-wide warrants. (Courtesy of Victoria Police Department)
Convicted killer, robber at large after failing to return to facility: Victoria police

Dean Reber, 60, and Jonathon Muzychka, 43, may be together

Oliver Elementary School
Former Oliver PAC treasurer charged with fraud returns to court

Belinda Yorke will be in court to fix a date for trial in February

B.C. Premier John Horgan listens during a postelection news conference in Vancouver on Sunday, Oct. 25, 2020. THE CANADIAN PRESS/Darryl Dyck
30% of B.C. recovery benefit applications held up in manual review

The province says 150 staff have been reassigned to help with manually reviewing applications

Adam Dergazarian, bottom center, pays his respect for Kobe Bryant and his daughter, Gianna, in front of a mural painted by artist Louie Sloe Palsino, Tuesday, Jan. 26, 2021, in Los Angeles. (AP Photo/Jae C. Hong)
Kobe Bryant’s presence remains strong a year after his death

Tuesday marks the grim anniversary of the crash that took their lives

Most Read