900 SINs stolen from CRA online systems during Heartbleed breach
NETFILE has been restored.
How to pay yourself as a power of attorney in Ontario
Should you be paid as a power of attorney? Learn about the compensation rules in Ontario and how to...
OTTAWA – The federal tax agency says the social insurance numbers of roughly 900 people were stolen from its systems, which were left vulnerable by the so-called Heartbleed bug.
The Canada Revenue Agency blocked public access to its online services for several days last week until it addressed the security risk, but said Monday there was nonetheless a data breach over a six-hour period.
It said it is analyzing other fragments of data that have been removed from its systems, while putting measures in place to protect those affected by the breach.
“I share the concern and dismay of those individuals whose privacy has been impacted by this malicious act,” CRA commissioner Andrew Treusch said in a statement.
“CRA online services are safe and secure. The CRA responded aggressively to successfully protect our systems. We have augmented our monitoring and surveillance measures, so that the security of the CRA site continues to meet the highest standards.”
Everyone affected will receive a registered letter and free access to credit protection services, the agency said.
The Heartbleed bug is caused by a flaw in OpenSSL software, which is commonly used on the Internet to provide security and privacy.
The bug is affecting many global IT systems in both private and public sector organizations and has the potential to expose private data.
Service was restored Sunday to all publicly accessible Government of Canada websites as well the tax-filing systems E-file and Netfile.
The CRA has apologized to Canadians for the delay and inconvenience, but added it was necessary to ensure the agency’s online services were safe and secure.
It said it will not apply interest or penalties to individual taxpayers filing their 2013 tax returns after April 30 for a period equal to the length of last week’s service interruption.
That means 2013 tax returns filed by May 5 will not incur interest or penalties.
Share this article Share on Facebook Share on Twitter Share on Linkedin Share on Reddit Share on Email
Related Articles
Canada’s income tax brackets for 2024, plus the maximum tax you’ll pay based on income
Want an idea of how much tax you paid—or will be paying—for 2024? Here are the federal and provincial...
What to know as Canada’s capital gains tax changes remain in legal limbo
The federal government’s capital gains inclusion rate increase has yet to become law. There’s a slight chance it may...
How to report foreign income in Canada
Canadians have reporting requirements for foreign assets, income and tax paid. Here’s how to claim each of these on...
How to talk to your family about crypto
Are your parents anxious about your interest in crypto investing? Here’s how to have family conversations about this and...
How to plan for taxes in retirement in Canada
In retirement, some income is not subject to withholding tax, and you may potentially owe tax after filing each...
How income from digital platforms is taxed in Canada
Driving for Uber or writing on Fiverr? Here’s what you need to know about filing your taxes.
Year-end tax and financial planning considerations
Some strategies are time-sensitive, while others can help you start the new year on the right foot.
Do you have to make quarterly tax remittances in Canada?
Here’s a guide to making the right tax installment payments, including answers to common questions about the process.