CRA suspends online accounts of over 100,000 Canadians after login credentials found for sale on dark web - National Post | Canada News Media
Connect with us

Business

CRA suspends online accounts of over 100,000 Canadians after login credentials found for sale on dark web – National Post

Published

 on


If you received an unexpected and cryptic email on Feb. 16 from CRA warning that your email had been deleted from the agency’s web platform, do not worry

Article content

OTTAWA – The Canada Revenue Agency had to suspend the accounts of more than 100,000 users of its online service because it detected troves of leaked login information on the dark web that could have led to data breaches.

If you received an unexpected and cryptic email on Feb. 16 from CRA warning you that your email had been deleted from the agency’s web platform, MyCRA, do not worry: your account has not been breached.

In fact, the agency says it means that their new early cyber security issue detection system is working (though the communication strategy will be reviewed and it “regrets the inconvenience.”)

But that also means your login data has probably been compromised through a third-party breach and you will need to contact CRA in order to regain access to your online account, particularly if you plan on filing your 2020 taxes online starting next week.

“To be clear, these accounts were not impacted by a cyber attack at the CRA. These accounts have not been compromised and the action taken to lock the accounts was a preventative measure,” agency spokesperson Christopher Doody said in an emailed statement.

Advertisement

Story continues below

This advertisement has not loaded yet, but your article continues below.

Article content

Steps on how to regain access to their online account will be sent to affected taxpayers by mail, he added.

The Feb. 16 email — an unusual form of communication in itself as the agency generally promises never to email taxpayers directly, preferring to send communications through MyCRA — came after the CRA suspended over 100,000 taxpayers’ accounts after detecting that their credentials were likely for sale on unsavoury online marketplaces.

“In this particular case, an internal analysis revealed evidence that some account credentials (i.e. user IDs and passwords) may have been compromised, and may be available for use by unauthorized individuals,” Doody wrote.

The agency assures that the data was not stolen from their servers, but instead through one of the many small-to-massive data breaches that have plagued an increasing number of organizations over the years (Equifax and Desjardins are just recent examples).

Some of that stolen login data was then put up for sale on the dark web, which is a hidden part of the Internet only accessible through tailored software.

When those credentials were cross-referenced with internal MyCRA login data, the agency noted over 100,000 accounts that used the same combination of email and password.

That meant that anyone who purchased the stolen data might have been able to access the taxpayers’ sensitive MyCRA account.

Advertisement

Story continues below

This advertisement has not loaded yet, but your article continues below.

Article content

To be clear, these accounts were not impacted by a cyber attack at the CRA

“As a precautionary security measure and to prevent unauthorized access to these accounts, we took swift action to lock the accounts and are in the process of contacting the legitimate account holders to unlock their accounts,” the agency said.

“We will work with impacted individuals to re-establish their credentials and unlock their accounts. There is no urgent need for taxpayers to contact us imminently unless they are an emergency benefit applicant and have active applications in our system.”

But the cryptic email sent out by the agency on Tuesday, which simply told the recipient that their email address had been removed from their Canada Revenue Agency account with no further explanation, created significant concern among Canadians.

Many were afraid that the issue was linked to significant cyber incidents and suspicious activity involving 48,500 MyCRA accounts last summer, though Doody assures that is not the case.

Those incidents forced CRA to suspend tens of thousands of taxpayers’ online accounts as well as suspend certain online services such as address changes until further notice.

Unable to reach the agency via its call centre, many Canadians turned to social media to get an explanation from the CRA.

“I just received an email that my email address has been removed from CRA. I don’t know why and didn’t initiate myself. I tried logging into the CRA website and as soon as I log in I get an error message. What’s going on?,” Twitter user Chris Lotts asked the agency.

Another user, Dennis Saunders from Halifax, was particularly concerned after receiving the cryptic email from CRA.

“Help me please you are freaking me out why am I locked out you removed my email Whats is going I am scared to death help me,” Saunders tweeted to the CRA.

• Email: cnardi@postmedia.com | Twitter:

Comments

Postmedia is committed to maintaining a lively but civil forum for discussion and encourage all readers to share their views on our articles. Comments may take up to an hour for moderation before appearing on the site. We ask you to keep your comments relevant and respectful. We have enabled email notifications—you will now receive an email if you receive a reply to your comment, there is an update to a comment thread you follow or if a user you follow comments. Visit our Community Guidelines for more information and details on how to adjust your email settings.

Let’s block ads! (Why?)



Source link

Continue Reading

Business

Roots sees room for expansion in activewear, reports $5.2M Q2 loss and sales drop

Published

 on

 

TORONTO – Roots Corp. may have built its brand on all things comfy and cosy, but its CEO says activewear is now “really becoming a core part” of the brand.

The category, which at Roots spans leggings, tracksuits, sports bras and bike shorts, has seen such sustained double-digit growth that Meghan Roach plans to make it a key part of the business’ future.

“It’s an area … you will see us continue to expand upon,” she told analysts on a Friday call.

The Toronto-based retailer’s push into activewear has taken shape over many years and included several turns as the official designer and supplier of Team Canada’s Olympic uniform.

But consumers have had plenty of choice when it comes to workout gear and other apparel suited to their sporting needs. On top of the slew of athletic brands like Nike and Adidas, shoppers have also gravitated toward Lululemon Athletica Inc., Alo and Vuori, ramping up competition in the activewear category.

Roach feels Roots’ toehold in the category stems from the fit, feel and following its merchandise has cultivated.

“Our product really resonates with (shoppers) because you can wear it through multiple different use cases and occasions,” she said.

“We’ve been seeing customers come back again and again for some of these core products in our activewear collection.”

Her remarks came the same day as Roots revealed it lost $5.2 million in its latest quarter compared with a loss of $5.3 million in the same quarter last year.

The company said the second-quarter loss amounted to 13 cents per diluted share for the quarter ended Aug. 3, the same as a year earlier.

In presenting the results, Roach reminded analysts that the first half of the year is usually “seasonally small,” representing just 30 per cent of the company’s annual sales.

Sales for the second quarter totalled $47.7 million, down from $49.4 million in the same quarter last year.

The move lower came as direct-to-consumer sales amounted to $36.4 million, down from $37.1 million a year earlier, as comparable sales edged down 0.2 per cent.

The numbers reflect the fact that Roots continued to grapple with inventory challenges in the company’s Cooper fleece line that first cropped up in its previous quarter.

Roots recently began to use artificial intelligence to assist with daily inventory replenishments and said more tools helping with allocation will go live in the next quarter.

Beyond that time period, the company intends to keep exploring AI and renovate more of its stores.

It will also re-evaluate its design ranks.

Roots announced Friday that chief product officer Karuna Scheinfeld has stepped down.

Rather than fill the role, the company plans to hire senior level design talent with international experience in the outdoor and activewear sectors who will take on tasks previously done by the chief product officer.

This report by The Canadian Press was first published Sept. 13, 2024.

Companies in this story: (TSX:ROOT)

The Canadian Press. All rights reserved.

Source link

Continue Reading

Business

Talks on today over HandyDART strike affecting vulnerable people in Metro Vancouver

Published

 on

 

VANCOUVER – Mediated talks between the union representing HandyDART workers in Metro Vancouver and its employer, Transdev, are set to resume today as a strike that has stopped most services drags into a second week.

No timeline has been set for the length of the negotiations, but Joe McCann, president of the Amalgamated Transit Union Local 1724, says they are willing to stay there as long as it takes, even if talks drag on all night.

About 600 employees of the door-to-door transit service for people unable to navigate the conventional transit system have been on strike since last Tuesday, pausing service for all but essential medical trips.

Hundreds of drivers rallied outside TransLink’s head office earlier this week, calling for the transportation provider to intervene in the dispute with Transdev, which was contracted to oversee HandyDART service.

Transdev said earlier this week that it will provide a reply to the union’s latest proposal on Thursday.

A statement from the company said it “strongly believes” that their employees deserve fair wages, and that a fair contract “must balance the needs of their employees, clients and taxpayers.”

This report by The Canadian Press was first published Sept. 12, 2024.

The Canadian Press. All rights reserved.

Source link

Continue Reading

Business

Transat AT reports $39.9M Q3 loss compared with $57.3M profit a year earlier

Published

 on

 

MONTREAL – Travel company Transat AT Inc. reported a loss in its latest quarter compared with a profit a year earlier as its revenue edged lower.

The parent company of Air Transat says it lost $39.9 million or $1.03 per diluted share in its quarter ended July 31.

The result compared with a profit of $57.3 million or $1.49 per diluted share a year earlier.

Revenue in what was the company’s third quarter totalled $736.2 million, down from $746.3 million in the same quarter last year.

On an adjusted basis, Transat says it lost $1.10 per share in its latest quarter compared with an adjusted profit of $1.10 per share a year earlier.

Transat chief executive Annick Guérard says demand for leisure travel remains healthy, as evidenced by higher traffic, but consumers are increasingly price conscious given the current economic uncertainty.

This report by The Canadian Press was first published Sept. 12, 2024.

Companies in this story: (TSX:TRZ)

The Canadian Press. All rights reserved.

Source link

Continue Reading

Trending

Exit mobile version