CRA loses taxpayer data to Heartbleed bug

Tax agency says 900 social insurance numbers compromised in online privacy breach

The Canada Revenue Agency says the social insurance numbers of 900 taxpayers were stolen last week by someone using the Heartbleed encryption vulnerability before the taxation agency shut down public access to its online services.

It happened over a six-hour period by someone exploiting the vulnerability in many supposedly secure websites that used an open-source encryption system.

The CRA said it will send registered letters to affected taxpayers and will not be emailing them because it doesn’t want fraudsters to use phishing schemes to further exploit the privacy breach.

“I want to express regret to Canadians for this service interruption,” CRA commissioner Andrew Treusch said. “I share the concern and dismay of those individuals whose privacy has been impacted by this malicious act.”

Other personal data and possibly businesses’ information may also have been lost.

“We are currently going through the painstaking process of analyzing other fragments of data, some that may relate to businesses, that were also removed,” Treusch said.

Taxpayers whose data was compromised will get bolstered CRA account protection and free access to credit protection services.

Canada’s Privacy Commissioner is also investigating.

Online services, including the E-file and Netfile online income tax portals, were patched and re-launched Sunday after what the CRA called a vigourous test to ensure they are safe and secure.

The CRA cut off access to those services April 8 as word spread that the Heartbleed bug had given hackers access to passwords, credit card numbers and other information at many websites.

People whose income tax filing was delayed by last week’s CRA interruption have been given until May 5 – beyond the usual April 30 filing deadline – to file returns without being penalized.

The Heartbleed vulnerability, which has existed for two years, compromised secure web browsing at some sites despite the display of a closed padlock that indicates an encrypted connection.

Just Posted

Fake attempted abduction not funny to residents of Langley neighbourhood

Two teenage boys won’t face criminal charges after scaring girl

Langley’s Georgia Ellenwood named Big Ten Women’s Field Athlete of the Year

Track and field athlete becomes first heptathlon National Champion at University of Wisconsin

Four arrested in police takedown in Langley

Monday night arrests result of firearms investigation by Vancouver Police Department

Cloverdale’s June Market Days to be bigger than ever

More than 90 vendors will line 176 Street for event this Saturday

UPDATE: Female driver airlifted to hospital following crash involving dump truck

Two vehicles involved in collision Tuesday morning in Abbotsford

Homeless people living on ‘Surrey Strip’ move into modular housing

BC Housing says 160 homeless people are being moved into temporary Whalley suites from June 19 to 21

B.C. RCMP looking for $70,000 in stolen collector cash

Money, in Canadian and Chinese denominations, goes missing in Chilliwack

Port of Prince Rupert names Shaun Stevenson as new CEO

Stevenson has worked for the port for 21 years as vice president of trade development

Senate officially passes Canada’s marijuana legalization bill

Bill C-45 now moves to royal assent, which is the final step in the legislative process

Mosquitoes out in full force already? Blame the weather

But a B.C. mosquito expert says the heat wave will help keep the pests at bay

Man pleads not guilty in 1987 slayings of B.C. couple

William Talbott of SeaTac was arraigned Tuesday in Snohomish County Superior Court

New GOP plan: Hold kids longer at border – but with parents

Move would ease rules that limit how much time minors can be held with their parents

Without a big data strategy, Canadians at risk of being ‘data cows’

Presentation said artificial intelligence could give Facebook and Amazon even more power

Five B.C. families stuck in Japan as Canada refuses visas for adopted babies

Lawyer points to change in American policy around adoptions from Japan

Most Read