CRA expects online services to be restored by Wednesday after cyberattacks

The Canada Revenue Agency expects online services to be fully restored by Wednesday after hackers used thousands of stolen usernames and passwords to fraudulently obtain government services.

About 5,600 CRA accounts were targeted in what the federal government describes as “credential stuffing” schemes, in which hackers used passwords and usernames from other websites to access Canadians’ revenue agency accounts.

Officials say the RCMP is investigating the breaches.

Get breaking National news

For news impacting Canada and around the world, sign up for breaking news alerts delivered directly to you when they happen.

Sign up for breaking National newsletter Sign Up

By providing your email address, you have read and agree to Global News' Terms and Conditions and Privacy Policy.

The suspension of CRA’s online services comes as many Canadians are using the revenue agency’s website to access financial support related to the COVID-19 pandemic.

0:37 Thousands of CRA, government service accounts targeted by hackers in ‘credential stuffing’ attacks

A senior agency official told a news briefing today that Canadians can still apply for benefit programs by calling 1-800-959-8281.

The government is advising Canadians to use unique passwords for all online accounts and to check for suspicious activity.