Government officials explain how “credential stuffing” hacks affected CRA accounts

Marc Brouillard, acting-Chief Technology Officer of the Government of Canada, explained what he called the “credential stuffing” technique used by hackers to illegally access thousands of CRA accounts last week, saying the attacks took advantage of the tendency of people to reuse the same passwords for different accounts and adding that the passwords used in the hack were collected from previous data breaches worldwide.