CRA loses taxpayer data to Heartbleed bug

Tax agency says 900 social insurance numbers compromised in online privacy breach

The Canada Revenue Agency says the social insurance numbers of 900 taxpayers were stolen last week by someone using the Heartbleed encryption vulnerability before the taxation agency shut down public access to its online services.

It happened over a six-hour period by someone exploiting the vulnerability in many supposedly secure websites that used an open-source encryption system.

The CRA said it will send registered letters to affected taxpayers and will not be emailing them because it doesn’t want fraudsters to use phishing schemes to further exploit the privacy breach.

“I want to express regret to Canadians for this service interruption,” CRA commissioner Andrew Treusch said. “I share the concern and dismay of those individuals whose privacy has been impacted by this malicious act.”

Other personal data and possibly businesses’ information may also have been lost.

“We are currently going through the painstaking process of analyzing other fragments of data, some that may relate to businesses, that were also removed,” Treusch said.

Taxpayers whose data was compromised will get bolstered CRA account protection and free access to credit protection services.

Canada’s Privacy Commissioner is also investigating.

Online services, including the E-file and Netfile online income tax portals, were patched and re-launched Sunday after what the CRA called a vigourous test to ensure they are safe and secure.

The CRA cut off access to those services April 8 as word spread that the Heartbleed bug had given hackers access to passwords, credit card numbers and other information at many websites.

People whose income tax filing was delayed by last week’s CRA interruption have been given until May 5 – beyond the usual April 30 filing deadline – to file returns without being penalized.

The Heartbleed vulnerability, which has existed for two years, compromised secure web browsing at some sites despite the display of a closed padlock that indicates an encrypted connection.

Just Posted

Residents line up outside the Vernon Recreation Complex for their COVID-19 vaccine Saturday, June 5. (Jennifer Smith - Morning Star)
No appointments necessary for first dose COVID-19 vaccine: Interior Health

People can just show up at clinics, register on the spot and get the shot

SD20 now has an electric bus. Photo: Submitted
Kootenay-Columbia School District 20 adds electric bus to fleet

Bus will be incorporated into Castlegar route for next school year

Painting by Dave Davies from Shaver’s Bench facing Teck Trail.
Happy 120th Birthday to the City of Trail!

The town of Trail Creek- or Trail Creek Landing - was incorporated as a city on June 14, 1901.

Cropped photo: Silver Screen Drive-in will be in the upper parking lot of Waneta Plaza.
Summer drive-in returns to Trail unveiling blockbuster movies

PHOTOS: Scroll to bottom for a trip down memory lane to the Auto Vue Drive-In

Gentle draft horses are bred and raised in feedlots in Canada to be exported for slaughter. Since 2013, more than 40,000 horses have been exported out of Canada. Photo: Canadian Horse Defense Coalition
Ban the shipping of Canadian horses overseas for slaughter

Since 2013, over 40,000 horses have been exported out of Canada.

t
How to tell if a call from ‘CRA’ is legitimate or a scam

Expert says it’s important to verify you really are dealing with the CRA before you give out any info

British Columbia-Yukon Community News Association’s 2021 Ma Murray Awards were handed out during a virtual ceremony on Friday, June 10. (Screen grab)
Black Press Media winners take gold at B.C. and Yukon journalism awards

Publications received nods in dozens of categories

Prime Minister Justin Trudeau greets campers while visiting McDougall, Ont. on Thursday, July 19, 2018. THE CANADIAN PRESS/Frank Gunn
71% of B.C. men say they’d prefer to go camping with Trudeau: survey

Most British Columbians with plans to go camping outdoors say they’d prefer to go with Trudeau or Shania Twain

Members of the Department of Fisheries and Oceans’ Marine Mammal Response Program rescued an adult humpback what that was entangled in commercial fishing gear in the waters off of Entrance Island on Thursday, June 10. (Photo courtesy Marine Mammal Response Program)
Rescuers free humpback ‘anchored’ down by prawn traps off Vancouver Island

Department of Fisheries and Oceans responders spend hours untangling whale

Chilliwack cocaine trafficker Clayton Eheler seen with a tiger somewhere in Asia in 2014. Eheler was sentenced to nine years jail in 2018, but was released on bail in October 2020 pending his appeal of conviction.(Facebook)
Director of civil forfeiture seeks $140,000 from Fraser Valley drug dealer’s father-in-law

Clayton Eheler’s father-in-law Ray Morrissey caught with money in Fort St. John by B.C.’s gang unit

A Comox Valley shellfish operator pleaded guilty and was fined $10,000 in provincial court in Courtenay earlier this year. Record file photo
B.C. clam harvester fined $10,000 for Fisheries Act violations

Charges against three others were stayed in Courtenay Provincial Court

Frank Phillips receives a visit from his wife Rena at Nanaimo Seniors Village on their 61st wedding anniversary, March 31, 2020. Social visits have been allowed since COVID-19 vaccination has been offered in all care homes. (Nanaimo News Bulletin)
B.C. prepares mandatory vaccination for senior care homes

180 more cases of COVID-19 in B.C. Friday, one more death

Lorraine Gibson, 90, received a COVID-19 immunization at the South Surrey Park and Ride vaccination clinic. (File photo: Aaron Hinks)
Surrey has had 25% of B.C.’s total COVID-19 cases

Surrey recorded 4,012 cases in May

The arrest south of Winnipeg occurred before Bernier was to arrive at a protest in the city. (Twitter/Maxime Bernier)
Maxime Bernier arrested following anti-rules rallies in Manitoba: RCMP

He’s been charged with exceeding public gathering limits and violating Manitoba’s requirement to self-isolate

Most Read