Well, this is a wee bit alarming.
The Canada Revenue Agency or CRA for short now says a mind blowing 48500 accounts were affected by the credential stuffing attack that happened in August that forced the CRA website offline for a few days and affected a number of government departments in the process while security was improved. CTV News has the details:
In a major update to the impact of a series of credential stuffing attacks on government websites including the Canada Revenue Agency, the country’s top information officer now says that “suspicious activities” have been found on 48,500 CRA user accounts.
And:
While it was initially reported that 5,500 CRA account users had their personal information accessed, officials then updated that number, saying a total of 11,200 accounts across Government of Canada services were compromised in the attacks. These included cyberattacks directly targeting both CRA accounts as well as “GCKey” accounts, which can be used by 30 government departments and agencies to access other online portals such as veterans’ benefits and immigration applications.
Every Canadian should be running to the CRA website and doing the following right now:
- Log in and see if you can still do so. If you cannot, you may have a problem.
- If you can log in, check to see if you applied for the Canada Emergency Response Benefit. If you haven’t but the CRA website says you have, you have a problem.
- Check to see if your address or banking information has changed. If it has you have a problem.
Now if any of the above falls under the “you have a problem” category, you should do what is recommended in this release from the CRA, which is to call 1-800-959-8281 (English) or 1-800-959-7383 (French) immediately.
If all is well with your CRA account, I would instantly change your password to something is at least 8 characters long, contains an uppercase letter, a number, and for bonus points a special character (!@#$%^&* for example). And I would enable email notifications on your account so that you can get notified of any changes. Especially ones that you didn’t make.
The bottom line is that the Government of Canada has now seriously dropped the ball here. To have about 4 times as many people affected by this hack is appalling. And they are beyond due to answer some serious questions about why this happened and why they should be trusted to protect the personal information of Canadians going forward.

Oracle Is In Touching Distance Of Owning TikTok…. Maybe
Posted in Commentary with tags TikTok on September 17, 2020 by itnerdOracle and a range of investors appear to be close to taking ownership of TikTok’s U.S. operations. Of course this assumes that the deal gets approval from President Donald Trump. And The Chinese don’t stop it. Here’s what Bloomberg had to say:
The Treasury Department, TikTok owner ByteDance Ltd. and Oracle Corp. have tentatively agreed to terms for Oracle’s bid for the U.S. operations of the social-media service, according to people familiar with the matter.
Treasury Secretary Steven Mnuchin sent Bytedance a revised terms sheet late Wednesday and the company and Oracle accepted it, the people said. They described the changes as addressing national security concerns about the transaction and asked not to be identified because of the sensitivity of the matter.
And:
Any deal needs to be approved by both Trump — who could still reject the transaction — and the Chinese government, where officials have accused the U.S. of “economic bullying.”
White House senior adviser Jared Kushner is aware of the revised terms but hasn’t reviewed the latest details in depth and hasn’t weighed in on whether Trump should sign off on the deal, one person familiar with the matter said.
This should prove interesting. While this seems like we are near the end of this saga, we’re not. Trump might wake up one morning, see something on his Twitter feed that angers him, and nuke the deal. Or the Chinese may stop it. So watch this space as this story is sure to develop further.
Leave a comment »