Sunday, March 21, 2021

CRA BLAMES RE-USED PASSWORDS; LAWSUIT HOLDS CRA RESPONSIBLE

 On Aug. 15 of last year, the Treasury Board secretary acknowledged 14,500 federal government accounts had been hacked in a number of cyberattacks, exposing social insurance numbers, tax and banking data and home addresses.

Then this month, it was revealed the CRA had suspended about 800,000 online accounts until they change their login credentials after identical information was found for sale on the dark web.

“These attacks, which used passwords and usernames collected from previous hacks of accounts worldwide, took advantage of the fact that many people re-use passwords and usernames across multiple accounts,” said a statement from the secretariat last August.

“The government is continuing its investigation, as is the RCMP to determine if there have been any privacy breaches and if information was obtained from these accounts. As well, the Office of the Privacy Commissioner has been contacted and alerted to possible breaches.”


No comments:

Post a Comment