By Canadian Press

Thousands of CRA and government accounts disabled after cyberattack

Aug 16, 2020 | 8:45 AM

OTTAWA — Hackers used more than 9,000 stolen usernames and passwords to apply for government services, and also targeted about 5,500 Canada Revenue Agency accounts, the federal government said in an announcement.

The RCMP is investigating whether the hack led to any privacy breaches or stolen information from the accounts, which have been disabled, the Treasury Board of Canada Secretariat said on Saturday.

The 9,000 hijacked accounts have been cancelled, and the approximately 3,000 accounts that were successful in getting government services are being investigated.

The 5,500 CRA accounts that were separately targeted have been disabled, and owners are being contacted, said the government.

The cyberattacks used a technique called credential stuffing to target a system used by 12 million users and about 30 federal departments, including immigration accounts.

firm handshake

B.C. NDP government, Greens reach 'shared priorities' agreement

1h ago

young volunteers

'Make a big difference:' Nanaimo volunteers collecting warm clothing for those in need

2h ago

strong storm

Wind warning issued as Pacific storm approaches Island

3h ago

The attackers used passwords and usernames collected from previous hacks of accounts worldwide, and “took advantage of the fact that many people reuse passwords and usernames across multiple accounts,” the government said.

This report by The Canadian Press was first published Aug. 16, 2020.

The Canadian Press