A person looks at a Canada Revenue Agency homepage in Montreal, Sunday, Aug. 16, 2020, as the COVID-19 pandemic continues in Canada and around the world. THE CANADIAN PRESS/Graham Hughes

A person looks at a Canada Revenue Agency homepage in Montreal, Sunday, Aug. 16, 2020, as the COVID-19 pandemic continues in Canada and around the world. THE CANADIAN PRESS/Graham Hughes

Thousands of CRA and government accounts disabled after cyberattack

Federal authorities scrambling for answers

Federal authorities were scrambling for answers over the weekend after revealing that hackers used thousands of stolen usernames and passwords to fraudulently obtain government services — with the extent of the damage still unclear.

More than 9,000 hijacked accounts that Canadians use to apply for and access federal services have been cancelled after being compromised in what the Treasury Board of Canada described as “credential stuffing” attacks.

“These attacks, which used passwords and usernames collected from previous hacks of accounts worldwide, took advantage of the fact that many people reuse passwords and usernames across multiple accounts,” the federal department said in a statement.

The hacked accounts were tied to GCKey, which is used by around 30 federal departments and allows Canadians to access various services such as employment insurance, veterans’ benefits and immigration applications.

One-third of those accounts successfully accessed services before all of the affected accounts were shut down, said the Treasury Board, which is responsible for managing the federal civil service as well as the public purse.

READ MORE: Twitter racing to unravel mystery cyberattack

Officials are now trying to determine how many of those services were fraudulent.

The GCKey attack included thousands of Canada Revenue Agency accounts, through which Canadians can access their income-tax records and other personal information as well as apply for financial support related to the COVID-19 pandemic.

A total of 5,500 CRA accounts were targeted through the GCKey attack and an earlier “credential stuffing” scheme, the Treasury Board said.

“Access to all affected accounts has been disabled to maintain the safety and security of taxpayers’ information and the Agency is contacting all affected individuals and will work with them to restore access to their CRA MyAccount,” the Treasury Board said in a statement.

The department did not reveal how many of the CRA accounts were compromised or the cost of the suspected fraud, but said federal officials as well as the RCMP and federal privacy commissioner were conducting separate investigations.

It also did not say how Canadians in receipt of services such as the Canada Child Benefit or Canada Emergency Response Benefit for those affected by COVID-19 would be affected.

Revelations of the GCKey attack follow earlier concerns and reports from some Canadians that they were being targeted by hackers during the pandemic, with some reporting thousands of dollars in CERB payments for which they did not apply.

READ MORE: To get the latest news on Vancouver Island, B.C., Canada and the world delivered to your inbox daily, click here.

The government warned Canadians to use unique passwords for all online accounts and to monitor them for suspicious activity.

The Canadian Anti-Fraud Centre says more than 13,000 Canadians have been victims of fraud totalling $51 million this year. There have been 1,729 victims of COVID-19 fraud worth $5.55 million.

Lee Berthiaume, The Canadian Press

Like us on Facebook and follow us on Twitter 

CanadaCoronaviruscybersecurity

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Island Health has confirmed the first long term care facility outbreak in Greater Victoria at Veterans Memorial Lodge in Saanich. (Google Maps)
Island Health records first long-term care COVID outbreak in Greater Victoria

Veterans Memorial Lodge in Saanich confirms one positive staff member

Itty, a Siamese cat, has been missing since a house fire in Victoria’s Fernwood neighbourhood on Friday, Nov. 27. Her owner says she has white fur with blonde and grey markings. (Facebook/ROAM)
Cat goes missing after house fire in Fernwood neighbourhood

‘Itty’ has white fur, blonde and grey markings and blue eyes

The Saanich Fire Department Station #2 C-Battalion members (left to right) firefighter Clayton Tilon, firefighter Bonnie Fiala, firefighter Zay Hamilton, Capt. Dawrin Schellenberg and firefighter Charlie Rivers show off their BC Emergency Health Servicecs Vital Link Award. (Photo courtesy Darwin Schellenberg)
Saanich firefighters receive Vital Link Award from paramedics for life-saving CPR

Award issued to C-Battalion, civilian for help saving cardiac arrest patient in June

An aerial view over Oak Bay. (Black Press Media File Photo)
An aerial view over Oak Bay and the Marina. Oak Bay residents pay the highest taxes on Vancouver Island. Don Denton/Black Press
Oak Bay secondary suites study considers units old and new

Secondary suites draft report due in new year

(Dave Landine/Facebook)
VIDEO: Dashcam captures head-on crash between snowplow and truck on northern B.C. highway

Driver posted to social media that he walked away largely unscathed

Black Press Media and BraveFace have come together to support children facing life-threatening conditions. Net proceeds from these washable, reusable, three-layer masks go to Make-A-Wish Foundation BC & Yukon.
Put on a BraveFace: Help make children’s wishes come true

Black Press Media, BraveFace host mask fundraiser for Make-A-Wish Foundation

A B.C. Ambulance Service paramedic wearing a face mask to curb the spread of COVID-19 moves a stretcher outside an ambulance at Royal Columbia Hospital, in New Westminster, B.C., on Sunday, November 29, 2020. THE CANADIAN PRESS/Darryl Dyck
Top doctor urges Canadians to limit gatherings as ‘deeply concerning’ outbreaks continue

Canada’s active cases currently stand at 63,835, compared to 53,907 a week prior

A Canadian Pacific freight train travels around Morant’s Curve near Lake Louise, Alta., on Monday, Dec. 1, 2014. A study looking at 646 wildlife deaths along the railway tracks in Banff and Yoho national parks in Alberta and British Columbia has found that train speed is one of the biggest factors. THE CANADIAN PRESS/Frank Gunn
Study finds train speed a top factor in wildlife deaths in Banff, Yoho national parks

Research concludes effective mitigation could address train speed and ability of wildlife to see trains

A airport worker is pictured at Vancouver International Airport in Richmond, B.C. Wednesday, March 18, 2020. THE CANADIAN PRESS/Jonathan Hayward
Canada extends COVID restrictions for non-U.S. travellers until Jan. 21 amid second wave

This ban is separate from the one restricting non-essential U.S. travel

Menno Place. (Google Street View image.)
B.C. care home looks to hire residents’ family members amid COVID-19-related staff shortage

Family would get paid as temporary workers, while having chance to see loved ones while wearing PPE

A man walks by a COVID-19 test pod at the Vancouver airport in this undated handout photo. A study has launched to investigate the safest and most efficient way to rapidly test for COVID-19 in people taking off from the Vancouver airport. The airport authority says the study that got underway Friday at WestJet’s domestic check-in area is the first of its kind in Canada. THE CANADIAN PRESS/HO, Vancouver Airport Authority *MANDATORY CREDIT*
COVID-19 rapid test study launches at Vancouver airport for departing passengers

Airport authority says that a positive rapid test result does not constitute a medical diagnosis for COVID-19

A small crash in the water south of Courtenay Saturday afternoon. Two men had to be rescued, but reports indicate there were no serious injuries. Photo by Mike Chouinard
Small plane crash in Comox Valley waters Saturday afternoon

Two rescued from plane that had flipped in water; no serious injuries reported

A photo from 2017, of Nuchatlaht First Nation members outside court after filing a land title case in B.C. ( Submitted photo/Nuchatlaht First Nation).
Vancouver Island First Nation calls on B.C. to honour UNDRIP in historic title case

Nuchatlaht First Nation says Crown counsel continues to stall the case using the ‘distasteful’ argument that the Nation ‘abandoned’ their land

Most Read