Cyberattacks Hit Thousands of Canadian Tax, Benefit Accounts

Yash Aryan

August 16, 2020

Hackers gained access to various government services after hackers hit the Canada Revenue Agency (CRA) with a third wave of credential stuffing attacks, leaving the CRA with no choice but to suspend online services. The access gained by the bad actors could give them access to Canadian citizen's tax-related and benefits information, Coronavirus relief fund money, and more. The 5,500 compromised Canada Revenue Agency accounts connect to a portal enabling Canadians to view and manage their tax and benefits information online. Nine thousand forty-one accounts of GCKey were also compromised, giving access to a portal used by 30 federal departments, providing online access to information and government services like employment and immigration. Canadian authorities confirmed that almost fifteen thousand accounts have been targeted.

Abridged fromThreatpost