Canada Revenue Agency suspends online services after cyberattacks

Canada Revenue Agency suspends online services after cyberattacks

Many of the hacked CRA accounts were targeted as part of a broader ‘credential stuffing’ attack

The Canada Revenue Agency has temporarily suspended its online services after two cyberattacks in which hackers used thousands of stolen usernames and passwords to fraudulently obtain government services and compromise Canadians’ personal information.

A total of 5,500 CRA accounts were targeted in what the federal government described as two “credential stuffing” schemes, in which hackers use passwords and usernames from other websites to access Canadians’ accounts with the revenue agency.

The decision to suspend CRA’s online services comes at a time when many Canadians and businesses have been using the revenue agency’s website to apply for and access financial support related to the COVID-19 pandemic.

The government is hoping to reinstate online access for businesses on Monday, according to a senior government official. That is when companies struggling due to the pandemic can start to apply for the latest round of federal wage subsidies.

It wasn’t immediately clear what impact the suspension of services will have in terms of other federal benefits, however, including the Canada Child Benefit and Canada Emergency Response Benefit for those affected by COVID-19.

The revenue agency was also vague in terms of what victims of the attack will have to do to get their accounts reinstated after it disabled them to prevent further fraud, saying only that letters will be mailed to those who have been affected.

At least one victim says she has yet to hear anything from the government after someone hacked into her CRA account earlier this month and successfully applied for the $2,000-per-month Canada Emergency Response Benefit for COVID-19.

Leah Baverstock, a law clerk in Kitchener, Ont., says she first realized her account had been compromised and contacted the revenue agency herself when she received several emails from CRA on Aug. 7 saying she had successfully applied for the CERB.

“The lady I spoke to at CRA, she’s said: ‘This is a one-off,’” said Baverstock, who has continued to work through the pandemic and did not apply for the support payments.

“And she told me a senior officer would be calling me within 24 hours because my account was completely locked down. And I still haven’t heard from anybody.”

READ MORE: Thousands of CRA and government accounts disabled after cyberattack

Baverstock expressed frustration at the lack of contact, adding she still does not know how the hackers accessed her account. She has since contacted her bank and other financial institutions to stop the hackers from using her information to commit more fraud.

“I am quite concerned,” she said. “Somebody could be living under my name. Who knows. It’s scary. It’s really scary.”

Many of the hacked CRA accounts were targeted as part of a broader “credential stuffing” attack in which more than 9,000 accounts that Canadians use to apply for and access federal services were compromised.

Those hacked accounts were tied to GCKey, which is used by around 30 federal departments and allows Canadians to access various services such as employment insurance, veterans’ benefits and immigration applications.

“These attacks, which used passwords and usernames collected from previous hacks of accounts worldwide, took advantage of the fact that many people reuse passwords and usernames across multiple accounts,” the Treasury Board of Canada said in a statement.

One-third of those accounts successfully accessed services before all of the affected accounts were shut down, said the Treasury Board, which is responsible for managing the federal civil service as well as the public purse.

Officials are now trying to determine not only how many of those services were fraudulent while the RCMP and federal privacy commissioner have been called in to assess the scale and scope of personal information stolen.

The government warned Canadians to use unique passwords for all online accounts and to monitor them for suspicious activity.

The Canadian Anti-Fraud Centre says more than 13,000 Canadians have been victims of fraud totalling $51 million this year. There have been 1,729 victims of COVID-19 fraud worth $5.55 million.

Lee Berthiaume, The Canadian Press


Like us on Facebook and follow us on Twitter.

Want to support local journalism during the pandemic? Make a donation here.

Canadian Revenue AgencyCyberfraudfraudhackers

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

A family of ducks that lives near Saanich Municipal Hall recently welcomed 11 ducklings and took them for a swim in the koi pond outside the offices. (District of Saanich/Twitter)
Pair of ducks make Saanich Municipal Hall a nursery for 11 hatchlings

Family of ducks spent time in koi pond before heading down to Swan Lake

Habitat Acquisition Trust has received provincial funding to help restore Garry oak ecosystems on southern Vancouver Island. (Photo by Jeremy da Silva)
Central Saanich park among sites for local Garry oak restoration projects

Habitat Acquisition Trust received $140,000 in funding for 12 projects

Architect’s rendering of the 7 Erskine Lane development, showing the view from the east and south. (VDA Architecture Ltd. image)
View Royal green-lights residential development on Erskine Lane

First of two developments near Victoria General Hospital will provide 71 housing units

With the help of a $110,000 federal grant, Saanich will be adding 22 new EV chargers for its municipal fleet to reduce emissions from district operations. (Black Press Media file photo)
Saanich adds 22 new EV chargers for municipal fleet to reduce corporate emissions

Federal grant adds $110,000 jolt to project, installation to be completed fall 2022

Protesters attempt to stop clear-cutting of old-growth trees in Fairy Creek near Port Renfrew. (Will O’Connell photo)
VIDEO: Workers, activists clash at site of Vancouver Island logging operation

Forest license holders asking for independent investigation into incident

Anyone with information on any of these individuals is asked to call 1-800-222-TIPS (8477) or visit the website victoriacrimestoppers.ca for more information.
Greater Victoria Crime Stoppers wanted list for the week of May 4

Greater Victoria Crime Stoppers is seeking the public’s help in locating the… Continue reading

(Black Press Media file photo)
POLL: Do you plan to travel on the Victoria Day long weekend?

It’s the unofficial start to the summer season. A time of barbecues,… Continue reading

A worker rides a bike at a B.C. Hydro substation in Vancouver, on Friday, April 16, 2021. THE CANADIAN PRESS/Darryl Dyck
BC Hydro report raises safety concerns as pandemic prompts jump in yard work

Incidents involving weekend tree trimmers, gardeners and landscapers have risen 30% since the pandemic hit

Starting Tuesday, May 11, B.C. adults born in 1981 and earlier will be able to register for a vaccine dose. (Haley Ritchie/Black Press Media)
BC adults 40+ eligible to book COVID-19 vaccinations next week

Starting Tuesday, people born in 1981 and earlier will be able to schedule their inoculation against the virus

Parks Canada and Tla-o-qui-aht Tribal Parks dig the washed up Princess M out from sand along the south shore of the Pacific Rim National Park Reserve. (Nora O’Malley photo)
Rescue attempt costs man his boat off Pacific Rim National Park Reserve

Coast Guard response questioned after volunteer responder’s speedboat capsizes in heavy swells

Road sign on Highway 1 west of Hope warns drivers of COVID-19 essential travel road checks on the highways into the B.C. Interior. (Jessica Peters/Chilliwack Progress)
B.C. residents want travel checks at Alberta border, MLA says

Police road checks in place at highways out of Vancouver area

People line up for COVID-19 vaccination at a drop-in clinic at Cloverdale Recreation Centre on Wednesday, April 27, 2021. Public health officials have focused efforts on the Fraser Health region. (Aaron Hinks/Peace Arch News)
B.C. reports 1st vaccine-induced blood clot; 684 new COVID cases Thursday

Two million vaccine doses reached, hospital cases down

Most Read