Arrest made in CRA 'Heartbleed' case: Police

A man has been charged in connection with the loss of 900 social insurance numbers from the CRA website, the RCMP reported Wednesday.

A 19-year-old man has been charged in connection with the loss of taxpayer data - including 900 social insurance numbers - from the Canada Revenue Agency website, the RCMP reported Wednesday.

Stephen Arthuro Solis-Reyes was arrested at his London, Ont. residence Tuesday and charged with unauthorized use of a computer and mischief in relation to data, the RCMP said. Police seized computer equipment from his home.

The CRA reported on Monday that 900 SINs had been stolen just before it shut down its website last Wednesday. The loss was detected last Friday, but the agency held off releasing the information to Canadians at the request of the RCMP, while it conducted an investigation.

The CRA, and several other government websites, shutdown online services - including the popular tax-filing systems EFILE and NETFILE - due to the threat posed by the Internet encryption bug, Heartbleed,  which affects OpenSSL used software used by two-thirds of website providers to provide security and privacy to users.

The agency said it will notify those affected by the security breach by registered letter and offer free additional protection services. It has also extended tax filing deadlines to May 5 due to the five-day service disruption.
 

Recent articles & video

How many hours are employees saving due to gen AI?

Construction sector association calls for prompt payment legislation

Unifor temporarily withdraws push to represent Amazon workers in B.C.

Are employee wellbeing initiatives providing value?

Most Read Articles

What does an employer have to report after a workplace harassment investigation?

Quebec teacher fired for joining ‘Survivor’ reality series

Nearly three-quarters of middle managers in Canada experiencing burnout: survey