'CRA has to devise stronger systems,' not blame Canadians: experts - Yahoo Canada Finance | Canada News Media
Connect with us

Business

'CRA has to devise stronger systems,' not blame Canadians: experts – Yahoo Canada Finance

Published

 on


Following a massive cybersecurity breach that affected thousands of Canadian CRA accounts, experts say that a behavioural shift in how the public approaches cybersecurity is important, but institutions need to take the lead.

<p class="canvas-atom canvas-text Mb(1.0em) Mb(0)–sm Mt(0.8em)–sm" type="text" content="The CBC first reported the series of cyberattacks that compromised the personal information of 11,200 accounts. The hackers targeted the Canada Revenue Agency and GCKey, an online portal through which Canadians are able to access employment insurance and other benefits.&nbsp;” data-reactid=”24″>The CBC first reported the series of cyberattacks that compromised the personal information of 11,200 accounts. The hackers targeted the Canada Revenue Agency and GCKey, an online portal through which Canadians are able to access employment insurance and other benefits. 

The hackers obtained information through “credential stuffing,” a type of attack where attackers obtain username and passwords that have been used on other websites, acting chief information officer for the Treasury Board of Canada Secretariat, Marc Brouillard, said during a press conference. 

Annette Butikofer, chief information officer at the CRA, said the agency was impacted on three separate occasions. She added that the hacked accounts have temporarily been revoked and individuals affected will get a letter from the CRA that will tell them how they can regain access to their accounts. 

<h2 class="canvas-atom canvas-text Mb(1.0em) Mb(0)–sm Mt(0.8em)–sm" type="text" content="Onus is on organizations: Cavoukian” data-reactid=”27″>Onus is on organizations: Cavoukian

Ann Cavoukian, former information and privacy commissioner of Ontario, said that the CRA should have been more responsible for ensuring their systems are up to date so attacks like this didn’t happen. 

“You can’t put this on the individuals by saying they have crummy passwords,” she said. “To expect individuals to regularly change their passwords and make it difficult, that’s just not going to happen. I think the CRA has to devise stronger systems.”

One way to do this would be implementing end-to-end encryption, a type of secure communication that would prevent third-parties from being able to access data. 

“If systems are not encrypted, hackers are going to jump all over it,” Cavoukian said. “Why the heck doesn’t the CRA elevate the level of security and protection by encrypting the data to make it much more difficult [for hackers]?”

Shared Services Canada said in an email that GCKey is an end-to-end encrypted service, and that the service itself was not compromised.

In the press conference, Brouillard said that systems did not include two-factor authentication because the system has to include security measures that are accessible by all Canadians. 

“We are constantly evaluating our security posture and addressing issues, adding mitigations. This is an ongoing challenge,” he said. “Two factor- authentication systems would have prevented this, [as well as technology] where you are required to have a key or device. But that is something that is challenging, not everyone can have those things. We also have to worry about making our systems accessible and easy to use.”

Brouillard noted that the government is looking into different technologies “where multi-factor is available” and they are encouraging Canadians to adopt the practice. 

<p class="canvas-atom canvas-text Mb(1.0em) Mb(0)–sm Mt(0.8em)–sm" type="text" content="Sumit Bhatia, director of communications and knowledge mobilization with Ryerson’s Cybersecure Catalyst told Yahoo Finance Canada that the lack of clarity on what cybersecurity protocols the CRA uses is concerning.&nbsp;” data-reactid=”36″>Sumit Bhatia, director of communications and knowledge mobilization with Ryerson’s Cybersecure Catalyst told Yahoo Finance Canada that the lack of clarity on what cybersecurity protocols the CRA uses is concerning. 

“I’m assuming that like any other company when a breach takes place, there’s some sort of an audit that happens. And then there’s some consideration placed on how they would share what their cybersecurity best practices are,” he said.

“We don’t have two-factor authentication and that just leads to believe that there’s still work to be done on their side with regards to how they manage security.”

Bhatia says that changing technology in a government system takes time, and that one change could impact an entire system dramatically. 

“These organizations are using legacy systems and they have to plan out a roll out in a way where one piece does not have a major impact on others,” he said.

“Attacks like this are also an indication that people need to be made aware of their role and responsibility in dealing with public systems and that’s where evolution becomes a priority.”

Bhatia also added that while the CRA needs to implement stronger technology, in the long term Canadians need better cybersecurity education that starts at the grade school level. 

“We are talking about a cultural shift and by that, I mean about living in an era where security can’t be an afterthought like it was a few years ago,” he said. 

“We are teaching six-year-old kids to learn how to code, how are we not making sure that every time they are taught about technology, or how to use a phone, laptop, or iPad, but we are not starting the discussion about security?”

The RCMP has confirmed it will be investigating the attacks but has not released any information in terms of who is responsible.

<p class="canvas-atom canvas-text Mb(1.0em) Mb(0)–sm Mt(0.8em)–sm" type="text" content="Download the Yahoo Finance app, available for&nbsp;Apple&nbsp;and&nbsp;Android&nbsp;and sign up for the&nbsp;Yahoo Finance Canada Weekly Brief.” data-reactid=”50″>Download the Yahoo Finance app, available for Apple and Android and sign up for the Yahoo Finance Canada Weekly Brief.

Let’s block ads! (Why?)



Source link

Business

Transat AT reports $39.9M Q3 loss compared with $57.3M profit a year earlier

Published

 on

 

MONTREAL – Travel company Transat AT Inc. reported a loss in its latest quarter compared with a profit a year earlier as its revenue edged lower.

The parent company of Air Transat says it lost $39.9 million or $1.03 per diluted share in its quarter ended July 31.

The result compared with a profit of $57.3 million or $1.49 per diluted share a year earlier.

Revenue in what was the company’s third quarter totalled $736.2 million, down from $746.3 million in the same quarter last year.

On an adjusted basis, Transat says it lost $1.10 per share in its latest quarter compared with an adjusted profit of $1.10 per share a year earlier.

Transat chief executive Annick Guérard says demand for leisure travel remains healthy, as evidenced by higher traffic, but consumers are increasingly price conscious given the current economic uncertainty.

This report by The Canadian Press was first published Sept. 12, 2024.

Companies in this story: (TSX:TRZ)

The Canadian Press. All rights reserved.

Source link

Continue Reading

Business

Dollarama keeping an eye on competitors as Loblaw launches new ultra-discount chain

Published

 on

 

Dollarama Inc.’s food aisles may have expanded far beyond sweet treats or piles of gum by the checkout counter in recent years, but its chief executive maintains his company is “not in the grocery business,” even if it’s keeping an eye on the sector.

“It’s just one small part of our store,” Neil Rossy told analysts on a Wednesday call, where he was questioned about the company’s food merchandise and rivals playing in the same space.

“We will keep an eye on all retailers — like all retailers keep an eye on us — to make sure that we’re competitive and we understand what’s out there.”

Over the last decade and as consumers have more recently sought deals, Dollarama’s food merchandise has expanded to include bread and pantry staples like cereal, rice and pasta sold at prices on par or below supermarkets.

However, the competition in the discount segment of the market Dollarama operates in intensified recently when the country’s biggest grocery chain began piloting a new ultra-discount store.

The No Name stores being tested by Loblaw Cos. Ltd. in Windsor, St. Catharines and Brockville, Ont., are billed as 20 per cent cheaper than discount retail competitors including No Frills. The grocery giant is able to offer such cost savings by relying on a smaller store footprint, fewer chilled products and a hearty range of No Name merchandise.

Though Rossy brushed off notions that his company is a supermarket challenger, grocers aren’t off his radar.

“All retailers in Canada are realistic about the fact that everyone is everyone’s competition on any given item or category,” he said.

Rossy declined to reveal how much of the chain’s sales would overlap with Loblaw or the food category, arguing the vast variety of items Dollarama sells is its strength rather than its grocery products alone.

“What makes Dollarama Dollarama is a very wide assortment of different departments that somewhat represent the old five-and-dime local convenience store,” he said.

The breadth of Dollarama’s offerings helped carry the company to a second-quarter profit of $285.9 million, up from $245.8 million in the same quarter last year as its sales rose 7.4 per cent.

The retailer said Wednesday the profit amounted to $1.02 per diluted share for the 13-week period ended July 28, up from 86 cents per diluted share a year earlier.

The period the quarter covers includes the start of summer, when Rossy said the weather was “terrible.”

“The weather got slightly better towards the end of the summer and our sales certainly increased, but not enough to make up for the season’s horrible start,” he said.

Sales totalled $1.56 billion for the quarter, up from $1.46 billion in the same quarter last year.

Comparable store sales, a key metric for retailers, increased 4.7 per cent, while the average transaction was down2.2 per cent and traffic was up seven per cent, RBC analyst Irene Nattel pointed out.

She told investors in a note that the numbers reflect “solid demand as cautious consumers focus on core consumables and everyday essentials.”

Analysts have attributed such behaviour to interest rates that have been slow to drop and high prices of key consumer goods, which are weighing on household budgets.

To cope, many Canadians have spent more time seeking deals, trading down to more affordable brands and forgoing small luxuries they would treat themselves to in better economic times.

“When people feel squeezed, they tend to shy away from discretionary, focus on the basics,” Rossy said. “When people are feeling good about their wallet, they tend to be more lax about the basics and more willing to spend on discretionary.”

The current economic situation has drawn in not just the average Canadian looking to save a buck or two, but also wealthier consumers.

“When the entire economy is feeling slightly squeezed, we get more consumers who might not have to or want to shop at a Dollarama generally or who enjoy shopping at a Dollarama but have the luxury of not having to worry about the price in some other store that they happen to be standing in that has those goods,” Rossy said.

“Well, when times are tougher, they’ll consider the extra five minutes to go to the store next door.”

This report by The Canadian Press was first published Sept. 11, 2024.

Companies in this story: (TSX:DOL)

Source link

Continue Reading

Business

U.S. regulator fines TD Bank US$28M for faulty consumer reports

Published

 on

 

TORONTO – The U.S. Consumer Financial Protection Bureau has ordered TD Bank Group to pay US$28 million for repeatedly sharing inaccurate, negative information about its customers to consumer reporting companies.

The agency says TD has to pay US$7.76 million in total to tens of thousands of victims of its illegal actions, along with a US$20 million civil penalty.

It says TD shared information that contained systemic errors about credit card and bank deposit accounts to consumer reporting companies, which can include credit reports as well as screening reports for tenants and employees and other background checks.

CFPB director Rohit Chopra says in a statement that TD threatened the consumer reports of customers with fraudulent information then “barely lifted a finger to fix it,” and that regulators will need to “focus major attention” on TD Bank to change its course.

TD says in a statement it self-identified these issues and proactively worked to improve its practices, and that it is committed to delivering on its responsibilities to its customers.

The bank also faces scrutiny in the U.S. over its anti-money laundering program where it expects to pay more than US$3 billion in monetary penalties to resolve.

This report by The Canadian Press was first published Sept. 11, 2024.

Companies in this story: (TSX:TD)

The Canadian Press. All rights reserved.

Source link

Continue Reading

Trending

Exit mobile version