Tax agency cuts off public access to electronic services over security worries

With tax-return season in full swing, the Canada Revenue Agency suddenly locked down its online filing services on Wednesday, fearful of a new vulnerability in software used by much of the world to safeguard secure websites on the Internet.

OTTAWA — With tax-return season in full swing, the Canada Revenue Agency suddenly locked down its online filing services on Wednesday, fearful of a new vulnerability in software used by much of the world to safeguard secure websites on the Internet.

All of the federal government’s online systems were under review after word of the so-called “Heartbleed” computer bug prompted the tax agency to pull the plug on its electronic services as a precaution.

“As a preventative measure, the CRA has temporarily shut down public access to our online services to safeguard the integrity of the information we hold,” the agency said in a statement.

The shutdown came after the Canadian Cyber Incident Response Centre (CCIRC) issued a warning to system administrators about the coding flaw. It recommended that system operators unable to plug in an immediate fix get off the grid.

Other federal systems were also being assessed for their vulnerability to the threat, said Antoine Ouellon, a spokesperson for Shared Services Canada, the federal agency that oversees the government’s IT infrastructure.

“Shared Services Canada is working with departments and Public Safety Canada to assess all IT systems to identify the extent of the problem and to apply solutions, including implementing patches, as required,” Ouellon said in a statement.

It was not immediately clear Wednesday whether any other online government would have to be taken off-line.

The Canada Revenue Agency services that were affected by Wednesday’s outage included the electronic tax-filing systems Efile and Netfile, as well as access to business and personal account data stored by the system.

The agency said it was working to restore safe and secure access and expected the site to be back online “over the weekend.”

The agency also took steps to reassure anxious would-be tax filers, suggesting that anyone who was prevented by the shutdown from filing a return on time would not be penalized.

The minister of National Revenue has confirmed that individual taxpayers will not be penalized for this service interruption,“ the agency said later Wednesday.

“We continue to investigate any potential impacts to taxpayer information, and to be fully engaged in resolving this matter and restoring online services as soon as possible in a manner that ensures the private information of Canadians remains safe and secure.”

It is a busy time of year for the tax agency, as people file returns electronically and track the progress of refunds online.

As of the end of March, the agency had received 6.7 million returns, with 84 per cent filed electronically.

The computer bug was reportedly detected last week by Internet security experts in Finland and researchers at Google, but only revealed widely within the online security community on Monday.

Heartbleed affects open-source software called OpenSSL that’s at the very core of millions of applications used to encrypt Internet communications. Experts warn that its impact on consumers could be significant.

It can reveal the contents of a computer server’s memory, including private data such as user names, passwords, and credit card numbers.

But the flaw also allows hackers to obtain copies of a server’s digital keys, and use them to impersonate other servers and fool people into thinking they are using a legitimate website.

A number of large global websites, such as Google, Facebook and Yahoo, have said they were either in the process of fixing the problem or had already dealt with the threat.

The Canadian Bankers Association, which represents some 59 domestic and foreign banks, said Wednesday that the online banking applications of Canadian banks were not affected by the bug.

“TD already has put in place defences to protect customers from this potential threat, and is adding additional, layered security, so customers can conduct their banking securely and without their data being at risk,” said Barbara Timmins, a spokeswoman at TD Bank Group.

“While we don’t recommend any specific actions to TD customers as a result of this vulnerability, we always recommend that customers change their passwords regularly,” she added.

RBC spokesman Jason Graham added that while the bank takes every threat seriously, RBC websites “have not been affected by the Heartbleed security bug.”

Despite the fact the problem is global in scope, NDP Leader Tom Mulcair wasted no time in blaming the federal Conservative government for failing to adequately protect and provide services to Canadians.

“The Conservatives are such poor public managers that they can’t deliver the grain, they can’t even deliver the mail and now at tax time they can’t even communicate with Canadians through the revenue agency,” Mulcair said.

Liberal Leader Justin Trudeau said only that he would support any measures needed to battle the bug.

Just Posted

Red Deer ‘champion’ helps hospital by sharing ongoing petition

It’s been about three years since many physicians at Red Deer Regional… Continue reading

Weaker pump prices help inflation cool to 1.7%, the lowest reading in a year

OTTAWA — The annual pace of inflation slowed considerably last month to… Continue reading

Salt Lake City bids for 2nd Olympics in changed climate

SALT LAKE CITY — When Salt Lake City pursued the Winter Olympics… Continue reading

‘Here is my home:’ Refugee whose fingers froze off finds hope in Winnipeg

WINNIPEG — Razak Iyal still wakes up in the middle of the… Continue reading

Trudeau sees 2019 election as choice between positive Liberals, divisive Tories

OTTAWA — Justin Trudeau says he’s confident he’ll win re-election next fall… Continue reading

Alberta’s Sundial starts shipping to AGLC this week

Sundial’s Rocky View facility has received the green light from Health Canada… Continue reading

Penny Marshall dead at 75, best known as TV’s Laverne and director of ‘Big,’ ‘A League of Their Own’

Bronx-born Penny Marshall, who found ’70s sitcom success on “Laverne and Shirley”… Continue reading

Chabot scores overtime winner to lift Senators over Predators 4-3

OTTAWA — Thomas Chabot saw an opening and he took it. And… Continue reading

Canadian Marielle Thompson earns World Cup ski cross bronze in season opener

AROSA, Switzerland — Canada’s Marielle Thompson captured bronze at the opening World… Continue reading

Canada doesn’t make Oscars short list for best foreign language film

LOS ANGELES — Canada is no longer in the running for best… Continue reading

Warrant issued for arrest of ‘Schwimmer lookalike’ suspect

LONDON — A British judge has issued an arrest warrant for an… Continue reading

Moneywise: Canadian workers unhappy with pay, want pension plans

Many working Canadians are feeling underpaid and are so worried about their… Continue reading

Brazil police say faith healer has turned himself in

RIO DE JANEIRO — A celebrity faith healer accused of sexually abusing… Continue reading

B.C. hockey coach creates ‘gear library’ to remove cost barrier of sport

VANCOUVER — Nicola Froese says she has always loved playing sports, but… Continue reading

Most Read