Victim of CRA breach says someone applied for CERB with her account - CTV News | Canada News Media
Connect with us

Business

Victim of CRA breach says someone applied for CERB with her account – CTV News

Published

 on


TORONTO —
When Leah Baverstock received an email on August 7 telling her that her application for the Canadian Emergency Response Benefit (CERB) had been approved, she was more than a little confused.

After all, she hadn’t applied to the program.

Baverstock is one of thousands of Canadians who had their accounts with the Canada Revenue Agency compromised this month after a “credential stuffing” scheme, in which hackers used previously obtained personal information, such as logins and passwords, to access users’ online accounts.

“It’s definitely scary times,” Baverstock told CTV News Channel. “I hadn’t applied for the CERB, so that was a bit of a shocker, so I ended up calling the CRA.

“The lady I spoke with said it was a one-off. She said, ‘I’m sorry that this happened to you,’ she proceeded to give me a list of people to call, to let them know it had happened. And then I heard about the other 5,000 or 9,000 people that this happened to, and I thought, ‘This is not a one-off.’”

Officials confirmed Monday that the 5,500 CRA accounts initially reported to have been breached were the tip of the iceberg: a total of 11,200 accounts for the Government of Canada services were compromised in the attack, including CRA accounts and “GCKey” accounts, which 30 government departments use.

Marc Brouillard, the acting chief technology officer for the Government of Canada, said Monday that “bad actors […] were also able to exploit a vulnerability in the configuration of security software solutions, which allowed them to bypass the CRA security questions and gain access to a user’s CRA account.”

Government officials have said that they first became aware of a security breach on Aug 7 — the same day Baverstock reports calling the CRA about her account — but didn’t contact the RCMP until Aug 11.

And Canadians were not informed of the breach until this past weekend, days after further attacks had been executed.

The CRA has defended its decision not to inform Canadians immediately, saying it needed time to inform people internally and try to regain access to breached accounts.

“I think about your social insurance number being your Canadian identification number, and I think if somebody has access to that, than they have access to basically anything,” Baverstock said.

“So I called the anti-fraud unit — they’re closed due to COVID. I called Service Canada, I let them know about what was happening with my social insurance number.”

She said she’d also been in contact with her bank and other accounts she has “to let them know it’s happened, to put some additional security in place if somebody does try to apply for credit in my name.

“But it concerns me because somebody could live under my name, under my social insurance number,” she pointed out. “Live as me.”

Experts in cyber security say that reusing your passwords and logins can make you vulnerable to these types of attacks, since one breach of one account could give a hacker the tools to login to numerous accounts as you.

But passwords aren’t the full picture of this breach.

Baverstock says she didn’t even have a password for her CRA account.

“Apparently you need a code to get in, so I applied for the code back in March and they said they would mail it to me,” she said. “I still haven’t received it, and I can’t even log into my CRA account, so it blows my mind that other people can.”

Baverstock is not impressed with the CRA’s response, saying she still has no idea what is happening with her account.

“When I spoke to the officer at CRA, she advised that a senior officer would call me within 24 hours, because my account has been completely locked down,” she said. “I can’t have any information.”

She said she still has not received a call back.

“It’s been over a week,” she said. “The CRA agent, she said that there are been multiple attempts to go into my account over the past little while, I guess they can see that in their system, so, I mean I’m thinking at that point they should’ve locked my account down right then and there and notified me.

“This should never have happened.” 

Let’s block ads! (Why?)



Source link

Business

Roots sees room for expansion in activewear, reports $5.2M Q2 loss and sales drop

Published

 on

 

TORONTO – Roots Corp. may have built its brand on all things comfy and cosy, but its CEO says activewear is now “really becoming a core part” of the brand.

The category, which at Roots spans leggings, tracksuits, sports bras and bike shorts, has seen such sustained double-digit growth that Meghan Roach plans to make it a key part of the business’ future.

“It’s an area … you will see us continue to expand upon,” she told analysts on a Friday call.

The Toronto-based retailer’s push into activewear has taken shape over many years and included several turns as the official designer and supplier of Team Canada’s Olympic uniform.

But consumers have had plenty of choice when it comes to workout gear and other apparel suited to their sporting needs. On top of the slew of athletic brands like Nike and Adidas, shoppers have also gravitated toward Lululemon Athletica Inc., Alo and Vuori, ramping up competition in the activewear category.

Roach feels Roots’ toehold in the category stems from the fit, feel and following its merchandise has cultivated.

“Our product really resonates with (shoppers) because you can wear it through multiple different use cases and occasions,” she said.

“We’ve been seeing customers come back again and again for some of these core products in our activewear collection.”

Her remarks came the same day as Roots revealed it lost $5.2 million in its latest quarter compared with a loss of $5.3 million in the same quarter last year.

The company said the second-quarter loss amounted to 13 cents per diluted share for the quarter ended Aug. 3, the same as a year earlier.

In presenting the results, Roach reminded analysts that the first half of the year is usually “seasonally small,” representing just 30 per cent of the company’s annual sales.

Sales for the second quarter totalled $47.7 million, down from $49.4 million in the same quarter last year.

The move lower came as direct-to-consumer sales amounted to $36.4 million, down from $37.1 million a year earlier, as comparable sales edged down 0.2 per cent.

The numbers reflect the fact that Roots continued to grapple with inventory challenges in the company’s Cooper fleece line that first cropped up in its previous quarter.

Roots recently began to use artificial intelligence to assist with daily inventory replenishments and said more tools helping with allocation will go live in the next quarter.

Beyond that time period, the company intends to keep exploring AI and renovate more of its stores.

It will also re-evaluate its design ranks.

Roots announced Friday that chief product officer Karuna Scheinfeld has stepped down.

Rather than fill the role, the company plans to hire senior level design talent with international experience in the outdoor and activewear sectors who will take on tasks previously done by the chief product officer.

This report by The Canadian Press was first published Sept. 13, 2024.

Companies in this story: (TSX:ROOT)

The Canadian Press. All rights reserved.

Source link

Continue Reading

Business

Talks on today over HandyDART strike affecting vulnerable people in Metro Vancouver

Published

 on

 

VANCOUVER – Mediated talks between the union representing HandyDART workers in Metro Vancouver and its employer, Transdev, are set to resume today as a strike that has stopped most services drags into a second week.

No timeline has been set for the length of the negotiations, but Joe McCann, president of the Amalgamated Transit Union Local 1724, says they are willing to stay there as long as it takes, even if talks drag on all night.

About 600 employees of the door-to-door transit service for people unable to navigate the conventional transit system have been on strike since last Tuesday, pausing service for all but essential medical trips.

Hundreds of drivers rallied outside TransLink’s head office earlier this week, calling for the transportation provider to intervene in the dispute with Transdev, which was contracted to oversee HandyDART service.

Transdev said earlier this week that it will provide a reply to the union’s latest proposal on Thursday.

A statement from the company said it “strongly believes” that their employees deserve fair wages, and that a fair contract “must balance the needs of their employees, clients and taxpayers.”

This report by The Canadian Press was first published Sept. 12, 2024.

The Canadian Press. All rights reserved.

Source link

Continue Reading

Business

Transat AT reports $39.9M Q3 loss compared with $57.3M profit a year earlier

Published

 on

 

MONTREAL – Travel company Transat AT Inc. reported a loss in its latest quarter compared with a profit a year earlier as its revenue edged lower.

The parent company of Air Transat says it lost $39.9 million or $1.03 per diluted share in its quarter ended July 31.

The result compared with a profit of $57.3 million or $1.49 per diluted share a year earlier.

Revenue in what was the company’s third quarter totalled $736.2 million, down from $746.3 million in the same quarter last year.

On an adjusted basis, Transat says it lost $1.10 per share in its latest quarter compared with an adjusted profit of $1.10 per share a year earlier.

Transat chief executive Annick Guérard says demand for leisure travel remains healthy, as evidenced by higher traffic, but consumers are increasingly price conscious given the current economic uncertainty.

This report by The Canadian Press was first published Sept. 12, 2024.

Companies in this story: (TSX:TRZ)

The Canadian Press. All rights reserved.

Source link

Continue Reading

Trending

Exit mobile version