Tax agency cuts off public access to electronic services over security worries

With tax-return season in full swing, the Canada Revenue Agency suddenly locked down its online filing services on Wednesday, fearful of a new vulnerability in software used by much of the world to safeguard secure websites on the Internet.

OTTAWA — With tax-return season in full swing, the Canada Revenue Agency suddenly locked down its online filing services on Wednesday, fearful of a new vulnerability in software used by much of the world to safeguard secure websites on the Internet.

All of the federal government’s online systems were under review after word of the so-called “Heartbleed” computer bug prompted the tax agency to pull the plug on its electronic services as a precaution.

“As a preventative measure, the CRA has temporarily shut down public access to our online services to safeguard the integrity of the information we hold,” the agency said in a statement.

The shutdown came after the Canadian Cyber Incident Response Centre (CCIRC) issued a warning to system administrators about the coding flaw. It recommended that system operators unable to plug in an immediate fix get off the grid.

Other federal systems were also being assessed for their vulnerability to the threat, said Antoine Ouellon, a spokesperson for Shared Services Canada, the federal agency that oversees the government’s IT infrastructure.

“Shared Services Canada is working with departments and Public Safety Canada to assess all IT systems to identify the extent of the problem and to apply solutions, including implementing patches, as required,” Ouellon said in a statement.

It was not immediately clear Wednesday whether any other online government would have to be taken off-line.

The Canada Revenue Agency services that were affected by Wednesday’s outage included the electronic tax-filing systems Efile and Netfile, as well as access to business and personal account data stored by the system.

The agency said it was working to restore safe and secure access and expected the site to be back online “over the weekend.”

The agency also took steps to reassure anxious would-be tax filers, suggesting that anyone who was prevented by the shutdown from filing a return on time would not be penalized.

The minister of National Revenue has confirmed that individual taxpayers will not be penalized for this service interruption,“ the agency said later Wednesday.

“We continue to investigate any potential impacts to taxpayer information, and to be fully engaged in resolving this matter and restoring online services as soon as possible in a manner that ensures the private information of Canadians remains safe and secure.”

It is a busy time of year for the tax agency, as people file returns electronically and track the progress of refunds online.

As of the end of March, the agency had received 6.7 million returns, with 84 per cent filed electronically.

The computer bug was reportedly detected last week by Internet security experts in Finland and researchers at Google, but only revealed widely within the online security community on Monday.

Heartbleed affects open-source software called OpenSSL that’s at the very core of millions of applications used to encrypt Internet communications. Experts warn that its impact on consumers could be significant.

It can reveal the contents of a computer server’s memory, including private data such as user names, passwords, and credit card numbers.

But the flaw also allows hackers to obtain copies of a server’s digital keys, and use them to impersonate other servers and fool people into thinking they are using a legitimate website.

A number of large global websites, such as Google, Facebook and Yahoo, have said they were either in the process of fixing the problem or had already dealt with the threat.

The Canadian Bankers Association, which represents some 59 domestic and foreign banks, said Wednesday that the online banking applications of Canadian banks were not affected by the bug.

“TD already has put in place defences to protect customers from this potential threat, and is adding additional, layered security, so customers can conduct their banking securely and without their data being at risk,” said Barbara Timmins, a spokeswoman at TD Bank Group.

“While we don’t recommend any specific actions to TD customers as a result of this vulnerability, we always recommend that customers change their passwords regularly,” she added.

RBC spokesman Jason Graham added that while the bank takes every threat seriously, RBC websites “have not been affected by the Heartbleed security bug.”

Despite the fact the problem is global in scope, NDP Leader Tom Mulcair wasted no time in blaming the federal Conservative government for failing to adequately protect and provide services to Canadians.

“The Conservatives are such poor public managers that they can’t deliver the grain, they can’t even deliver the mail and now at tax time they can’t even communicate with Canadians through the revenue agency,” Mulcair said.

Liberal Leader Justin Trudeau said only that he would support any measures needed to battle the bug.

Just Posted

Firefighters and emergency services workers helped celebrate Barry Young’s 85th birthday at Timberstone Mews on May 29. (Photo by Sean McIntosh/Advocate staff)
Firefighters in central Alberta make birthdays special

A fire truck arriving outside your house is not normally good news.… Continue reading

The Government of Alberta identified 115 new COVID-19 cases Sunday, bringing the provincial total to 3,089.
(Black Press file photo)
Red Deer drops to 71 active cases of COVID-19

Province adds 127 new cases of the virus

Crimson Villas, a seniors housing facility in Red Deer has finally opened its doors. (Photo by BYRON HACKETT/Advocate Staff)
Red Deer senior housing facility opens its doors

Crimson Villas, named after Red Deer’s official flower, has officially bloomed. The… Continue reading

The Town of Ponoka, who has typically leased the main stampede grounds to the Ponoka Stampede and Exhibition Association, is transferring the land to the association. (Photo by Emily Jaycox/Ponoka News)
AB Gov’t to provide more grants for live event organizers

Live events will be getting a boost from the provincial government over… Continue reading

Alberta government committed $7 million last year for an integrated shelter service to help Red Deer's homeless population. (Photo by Advocate staff)
City of Red Deer finds only one viable location for emergency shelter

City of Red Deer administration is recommending the Cannery Row Emergency Shelter… Continue reading

A large number of supporters were out Saturday at a rally intended to bring awareness about including Hinduism in the grade 2 portion of the K-6 draft curriculum. As it stands now, Hinduism won’t be taught until grade 6 in the proposed draft curriculum. (Photo by BYRON HACKETT/Advocate Staff)
Video: Rally to support adding Hinduism to draft curriculum draws crowd in Red Deer

The Hindu community in Red Deer came out in droves on Saturday… Continue reading

This undated file photo provided by Ernie Carswell & Partners shows the home featured in the opening and closing scenes of The Brady Bunch in Los Angeles. Do you know the occupation of Mike Brady, the father in this show about a blended family? (Anthony Barcelo/Ernie Carswell & Partners via AP, File)
QUIZ: A celebration of dad on Father’s Day

How much do you know about famous fathers?

Germany's Robin Gosens, left, celebrates Germany's Mats Hummels after scoring his side's fourth goal during the Euro 2020 soccer championship group F match between Portugal and Germany at the football arena stadium in Munich, Saturday, June 19, 2021. (Matthias Hangst/Pool Photo via AP)
Germany clicks at Euro 2020 with 4-2 win over Portugal

MUNICH (AP) — Germany finally clicked into gear at the European Championship,… Continue reading

Fans cheer on their team during the pre-game warmup of Game 3 of the NHL Stanley Cup semifinal with the Montreal Canadiens facing the Vegas Golden Knights, in Montreal, Friday, June 18, 2021. THE CANADIAN PRESS/Paul Chiasson
COVID-19 concerns give way to Habs Fever in Quebec as Montreal continues playoff run

MONTREAL — The sun hadn’t yet risen in Montreal on Friday morning… Continue reading

Coronavirus cases are on the rise from India to South Africa and Mexico, in a May 19, 2020 story. (Photo by THE ASSOCIATED PRESS)
As Brazil tops 500,000 deaths, protests against president

RIO DE JANEIRO (AP) — Anti-government protesters took to the streets in… Continue reading

A black bear cub forages for food along a salmon stream below a bear viewing spot for tourists in the Mendenhall Glacier Recreation Area in Juneau, Alaska.  (File photo by THE ASSOCIATED PRESS)
Bandit responsible for vehicle break-ins is a black bear

THORNTON, N.H. (AP) — Surveillance video helped police get to the bottom… Continue reading

FILE - In this April 25, 2019 file photo, Editor Rick Hutzell, center, gives a speech to his staff including Chase Cook, Nicki Catterlin, Rachael Pacella, Selene San Felice and Danielle Ohl at the Capital Gazette in Annapolis, Md. The editor of the Capital Gazette, which won a special Pulitzer Prize citation for its coverage and courage in the face of a massacre in its newsroom, is leaving the Maryland newspaper. Hutzell, who worked at the Annapolis paper for more than three decades, authored a farewell column that was published on the paper's website Saturday, June 19, 2021. (Ulysses Muoz/The Baltimore Sun via AP)
Editor of paper that endured newsroom shooting says goodbye

ANNAPOLIS, Md. (AP) — The editor of the Capital Gazette, which won… Continue reading

Britain's Queen Elizabeth II look on, during day five of of the Royal Ascot horserace meeting, at Ascot Racecourse, in Ascot, England, Saturday June 19, 2021. (David Davies/PA via AP)
Queen beams as she returns to Ascot after COVID-19 hiatus

LONDON (AP) — Queen Elizabeth II was smiling broadly as she attended… Continue reading

Barbara Violo, pharmacist and owner of The Junction Chemist Pharmacy, draws up a dose behind vials of both Pfizer-BioNTech and Oxford-AstraZeneca COVID-19 vaccines on the counter, in Toronto, Friday, June 18, 2021. An independent vaccine tracker website founded by a University of Saskatchewan student says just over 20 per cent of eligible Canadians — those 12 years old and above — are now fully vaccinated. THE CANADIAN PRESS/Nathan Denette
At least 20 per cent of eligible Canadians fully vaccinated, data suggests

TORONTO — Canada has hit two of the vaccination targets government officials… Continue reading

Most Read