Thousand of Canadians are either discovering they are locked out of their accounts or receiving a notice from the Canada Revenue Agency advising they are locked out of their online accounts. The agency says a recent analysis revealed evidence some user IDs and passwords for C-R-A accounts “may have been obtained by unauthorized third parties.”
The federal Revenue Agency says the user IDs and passwords were not compromised by a breach of its web site – but – they may have been obtained by or through a variety of external sources such as email phishing schemers or third party data breaches. The discovery was made during routine security checks.
The email addresses associated with the accounts were removed last month and users were notified. Now the agency has revoked the IDS and passwords – and – is now in the process of notifying those impacted with instructions on how to regain access to their C-R-A accounts.
Emails like the one above are going out to those with locked accounts and advising how to regain access. More information is available here.
