CRA loses taxpayer data to Heartbleed bug

Tax agency says 900 social insurance numbers compromised in online privacy breach

The Canada Revenue Agency says the social insurance numbers of 900 taxpayers were stolen last week by someone using the Heartbleed encryption vulnerability before the taxation agency shut down public access to its online services.

It happened over a six-hour period by someone exploiting the vulnerability in many supposedly secure websites that used an open-source encryption system.

The CRA said it will send registered letters to affected taxpayers and will not be emailing them because it doesn’t want fraudsters to use phishing schemes to further exploit the privacy breach.

“I want to express regret to Canadians for this service interruption,” CRA commissioner Andrew Treusch said. “I share the concern and dismay of those individuals whose privacy has been impacted by this malicious act.”

Other personal data and possibly businesses’ information may also have been lost.

“We are currently going through the painstaking process of analyzing other fragments of data, some that may relate to businesses, that were also removed,” Treusch said.

Taxpayers whose data was compromised will get bolstered CRA account protection and free access to credit protection services.

Canada’s Privacy Commissioner is also investigating.

Online services, including the E-file and Netfile online income tax portals, were patched and re-launched Sunday after what the CRA called a vigourous test to ensure they are safe and secure.

The CRA cut off access to those services April 8 as word spread that the Heartbleed bug had given hackers access to passwords, credit card numbers and other information at many websites.

People whose income tax filing was delayed by last week’s CRA interruption have been given until May 5 – beyond the usual April 30 filing deadline – to file returns without being penalized.

The Heartbleed vulnerability, which has existed for two years, compromised secure web browsing at some sites despite the display of a closed padlock that indicates an encrypted connection.

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

This male Dungeness can safely be harvested after passing muster. An official with Fisheries and Oceans Canada says it is not clear how well locals on the Saanich Peninsula are complying with crabbing regulations, but her comments suggest that any problems might be of a minor nature. (Department of Fisheries and Oceans/Submitted)
Sidney and Sooke record 57 crabbing violations in 2020

While recreational crab fishery has ‘compliance issues,’ no evidence of ‘large scale poaching’

Victoria police are investigating after a person broke into and stole a vehicle from a Douglas Street car dealership on the morning of March 3. (Courtesy of Victoria Police Department)
Suspect sought after vehicle swiped from Victoria dealership

Suspect broke into Douglas Street dealership shortly before 5 a.m.

Cleanup happens after an overnight flood Monday damaged areas of the Oaklands Community Centre. (Facebook/Oaklands Community Association)
Greater Victorians offer flood of support to Oaklands Community Centre

Blown hot water tank Monday night leaves staff cleaning up soggy mess

Const. Mat Jones of the CRD Integrated Road Safety Unit joined a team of Saanich police officers and ICBC representatives cracking down on distracted driving at the McKenzie/Quadra intersection in Saanich on March 3. (Devon Bidal/News Staff)
‘Leave the phone alone’: 40 distracted driving tickets issued in two hours at Saanich intersection

Saanich police, CRD Integrated Road Safety Unit crackdown on drivers’ cell-phone use

Victoria Police Department vehicle outside the headquarters building. VicPD (Black Press Media file photo)
Man arrested after Victoria restaurant worker punched, thrown to the ground

Police say woman was found lying on the sidewalk with non-life threatening injuries

Health Minister Adrian Dix looks on as Dr. Bonnie Henry pauses for a moment as she gives her daily media briefing regarding COVID-19 for British Columbia in Victoria, B.C. THE CANADIAN PRESS/Jonathan Hayward
7 additional deaths and 542 new COVID-19 cases in B.C.

Provincial health officials reported 18 new COVID-19 cases linked to variants of concern

Anyone with information on any of these individuals is asked to call 1-800-222-TIPS (8477) or visit the website victoriacrimestoppers.ca for more information.
Greater Victoria Crime Stoppers wanted list for the week of March 2

Greater Victoria Crime Stoppers is seeking the public’s help in locating the… Continue reading

(Black Press Media file photo)
POLL: How’s your butter?

Recent reports have some Canadians giving a second look to one of… Continue reading

Chief Justice Christopher Hinkson (Office of the Chief Justice)
Judge questions whether B.C.’s top doctor appreciated right to religious freedom

Lawyer for province says Dr. Henry has outlined the reasons for her orders publicly

A sample of guns seized at the Pacific Highway border crossing from the U.S. into B.C. in 2014. Guns smuggled from the U.S. are used in criminal activity, often associated with drug gangs. (Canada Border Service Agency)
B.C. moves to seize vehicles transporting illegal firearms

Bill bans sale of imitation or BB guns to young people

The City of Duncan will implement a new pilot project targeting vandalism this spring. (File photo)
Graffiti trouble? Duncan will give you the brush and the paint to remove it

Intiative based on a successful project to protect Port Alberni from unwanted spray paint

BC Housing minister David Eby is concerned that Penticton council’s decision to close a local homeless shelter will result in a “tent city” similar to this one in Everett, Wa. (Olivia Vanni / Black Press file)
‘Disappointed and baffled’ B.C. housing minister warns of tent city in Penticton

Penticton council’s decision to close a local homeless shelter could create tent city, says David Eby

The first of Fisheries and Oceans Canada’s long-range maritime patrol aircraft—the Dash-8—becomes operational. (Photo supplied by PAL Aerospace)
Fisheries and Oceans Canada’s new De Havilland Dash-8-100 long-range surveillance air craft is capable of staying aloft for eight to 10 hours for a variety of missions up and down the B.C. coast. (Photo supplied by PAL Aerospace)
New plane will double DFO’s surveillance capacity in B.C.

The Dash-8 will fly out of Campbell River for enforcement, conservation missions

A recently published study out of UBC has found a link between life satisfaction levels and overall health. (Pixabay)
Satisfied with life? It’s likely you’re healthier for it: UBC study

UBC psychologists have found those more satisfied with their life have a 26% reduced risk of dying

Most Read