Security matters: CRA services impacted as a result of cyber attack

Community Manager
Community Manager

TELUS Online Security in partnership with NortonLifeLock™



What happened?


On August 15, approximately 5,500 CRA accounts were compromised due to “credential stuffing” - cyber criminals using previously-hacked usernames and passwords from accounts worldwide to access other accounts, taking advantage of the fact that many Canadians use the same login information across multiple websites.


The breach was part of a larger attack where more than 9,000 federal government service accounts were hacked, including GCKey, a secure online portal that allows access to services such as employment insurance, veterans' benefits, and immigration applications. 

More than 13,000 Canadians have been victims of fraud totalling $51 million this year so far, with more than 1,700 reported victims of COVID-19 fraud worth $5.55 million, according to the Canadian Anti-Fraud Centre.






What now?


Canadians and businesses accessing financial support related to COVID-19 may be affected - including some of our customers. 

All affected CRA online MyAccounts were temporarily blocked to maintain safety and security, but the government has reinstated limited online access for businesses. The CRA is in the process of contacting all affected individuals to confirm identity to regain access. The RCMP and the Office of the Privacy Commissioner of Canada are assessing the scale and scope of personal information stolen.



Cyber security: it’s in your hands


Cyber criminals need you to give them an opportunity. Keep yourself and your family safe in the digital world with these online security tips:


  • don't share passwords with anyone as confidential materials may be accessed or files deleted;
  • don't reuse log in information to keep your personal data harder to hack;
  • use a secure VPN while using public Wi-Fi to protect your online privacy and hide your online activities from cyber criminals;
  • be mindful of phishing attempts and refrain from opening questionable emails or links;
  • ensure both work and personal devices are protected by strong security tools to protect against potential threats; and,
  • regularly update your apps and devices to keep security patches up-to-date.


Help build a safer environment online. Learn more about TELUS Wise, our educational program created to empower Canadians to have a more positive experience online.



TELUS Online Security Powered by NortonLifeLockTM


Cyber criminals can take advantage of the fact that many people reuse passwords and usernames by trying ones gained from past hacks to gain entry into new accounts.


TELUS Online Security (TOS) can help you test the strength of your existing passwords, auto-generate complex ones, and sync your logins across devices with Norton Password Manager^.


The TOS Standard, Complete, and Ultimate plans also provide all-in-one online protection for multiple devices; and, depending on your package, Credit Monitoring Alerts1, Identity Theft Reimbursement Coverage †, and LifeLock Full-Service Identity Restoration.


Learn more about our powerful cyber safety solutions by visiting TELUS Online Security.






No one can prevent all identity theft or all cybercrime.


^ Mobile app and browser extension must be installed separately.


† The Identity Theft Reimbursement Coverage, with a limit of up to $25,000 for Basic Plus, up to $100,000 for Premium and up to $1 Million for Premium Plus, is underwritten and administered by American Bankers Insurance Company of Florida, an Assurant company. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions. Review the Summary of Benefits under the Insurance Coverage (Canada) here.


1 If your plan includes credit reports, scores, and/or credit monitoring features ("Credit Features"), two requirements must be met to receive said features: (i) your identity must be successfully verified with TransUnion; and (ii) TransUnion and Equifax must be able to locate your credit file that contains sufficient credit history information. If these requirements are not met you will not receive credit features from the bureaus. You will receive Credit Features once the verification process is successfully completed. Any credit monitoring will take several days to begin after your successful plan enrollment.