Security News > 2020 > August > Cyberattacks Hit Thousands of Canadian Tax, Benefit Accounts

Canadian authorities said almost 15,000 online accounts for various government services have been targeted in three recent waves of credential-stuffing attacks.

Of the 9,041 accounts GCKey accounts that were targeted, a third were used to access various services and are being further examined for suspicious activity, according to the government.

On the heels of the attacks targeting the 5,500 CRA accounts the government has disabled services connected to My Account, My Business Account and Represent a Client on the CRA website.

On Monday government officials also revealed that a vulnerability in the configuration of the security software for CRA accounts allowed attackers to bypass security measures.

The users tied to compromised accounts are all being notified of the security incident and all attacks have since been mitigated, authorities said.

News URL

https://threatpost.com/cyberattacks-canadian-tax-benefit-accounts/158400/