CRA loses taxpayer data to Heartbleed bug

Tax agency says 900 social insurance numbers compromised in online privacy breach

The Canada Revenue Agency says the social insurance numbers of 900 taxpayers were stolen last week by someone using the Heartbleed encryption vulnerability before the taxation agency shut down public access to its online services.

It happened over a six-hour period by someone exploiting the vulnerability in many supposedly secure websites that used an open-source encryption system.

The CRA said it will send registered letters to affected taxpayers and will not be emailing them because it doesn’t want fraudsters to use phishing schemes to further exploit the privacy breach.

“I want to express regret to Canadians for this service interruption,” CRA commissioner Andrew Treusch said. “I share the concern and dismay of those individuals whose privacy has been impacted by this malicious act.”

Other personal data and possibly businesses’ information may also have been lost.

“We are currently going through the painstaking process of analyzing other fragments of data, some that may relate to businesses, that were also removed,” Treusch said.

Taxpayers whose data was compromised will get bolstered CRA account protection and free access to credit protection services.

Canada’s Privacy Commissioner is also investigating.

Online services, including the E-file and Netfile online income tax portals, were patched and re-launched Sunday after what the CRA called a vigourous test to ensure they are safe and secure.

The CRA cut off access to those services April 8 as word spread that the Heartbleed bug had given hackers access to passwords, credit card numbers and other information at many websites.

People whose income tax filing was delayed by last week’s CRA interruption have been given until May 5 – beyond the usual April 30 filing deadline – to file returns without being penalized.

The Heartbleed vulnerability, which has existed for two years, compromised secure web browsing at some sites despite the display of a closed padlock that indicates an encrypted connection.

Just Posted

Rossland rec site project on a roll after three years

After three years of hard work, the Rossland Recreation Site project is nearly complete.

Rossland’s asset management planning takes centre stage at BC conference

Mayor Kathy Moore and CAO Bryan Teasdale recapped Rossland’s asset and infrastructure planning.

City of Rossland celebrates completion of Spokane Street Infrastructure Project

The City of Rossland celebrated the completion of the Spokane Street Infrastructure Project.

Thankful client shares story at Columbia Basin Alliance for Literacy AGM

Kyoko Smith came to CBAL through a settlement program, her story highlights what CBAL is all about.

Politics and the Trail public library

Trail addresses the politics of public library; challenges with funding and governance

VIDEO: Rare comic showing Superman’s 1st appearance to be auctioned

The 1938 comic features Superman hoisting a car over his head

An adopted cat is the best 10 pounds you’ll gain this season

BC SPCA encouraging families to add a forever feline friend during adoption event Nov. 24 to Dec. 3

Uber official says public needs to push for ridesharing in B.C.

Mike van Hemmen tells Kelowna Chamber of commerce ridesharing would be ‘win-win-win’

B.C. co-ops relieved with Ottawa’s housing strategy

Federal government to have a new co-operative housing funding model in place by 2020

B.C. NDP referendum plan sparks legislature battle

David Eby says public will decide on proportional referendum

Hammy has been freed of his threads, a purple antler remains

The iconic Prince Rupert buck with a piece of hammock attached to his antlers was caught by COs

COLUMN: Taking another look at Kelowna

Columnist Donna Macdonald finds many things to love about the city Nelsonites love to hate

Court adjourned again for man linked to Shuswap farm where human remains found

Curtis Sagmoen will appear back in court on Dec. 14

B.C. family advocating for drug decriminalization following death of son

Federal NDP leader Jagmeet Singh has noted the New Democrats would decriminalize personal possession of all drugs

Most Read