Inadequate security led to federal breach that compromised Canadians' info: watchdog
Government departments lacked adequate protections to fend off a "sophisticated and co-ordinated" cyberattack that compromised the sensitive information of tens of thousands of Canadians, the federal privacy watchdog has found.
In a report tabled Thursday, privacy commissioner Philippe Dufresne describes how the lapse at the Canada Revenue Agency and Employment and Social Development Canada in summer 2020 allowed hackers to fraudulently collect payments.
The report says the breach of financial, banking and employment data led to numerous cases of fraud and identity theft, including many illicit applications for COVID-19 emergency response benefits.
The investigation found the revenue and employment departments had underestimated the level of identity authentication needed for their online programs and services.
The commissioner also concluded the departments did not take the necessary steps to promptly detect and contain the breach.
Both organizations have agreed to implement recommendations aimed at ensuring efficient safeguards against attacks, rapid response to breaches and regular security assessments.
"Federal government departments and agencies are attractive targets for cyberattacks and must have robust safeguards to mitigate against breaches and protect the sensitive personal information and programs that they manage," Dufresne said in a statement.
"If a breach does occur, it is crucial that organizations act promptly to remedy the situation and prevent further damage to those affected."
The commissioner found that attackers used, among other things, the revenue agency's sign-in portal and ESDC's "GCKey" authentication service to get into their online services and access individuals' accounts using stolen login information and passwords obtained during previous breaches.
Attackers used a technique known as credential stuffing, allowing them to access, modify and create new online accounts in these stolen identities to fraudulently redirect government benefit payments to other bank accounts, the report says.
It also notes challenges the commissioner faced in the form of "delayed and missing breach reports and accessing information from departments during the investigation."
"Unnecessary delays can increase harms flowing from a breach and hinder the investigative process," the report says.
In addition, the commissioner's office is following up with the revenue agency on separate breaches regarding Canada Emergency Response Benefit fraud in 2020, which it learned about in the final stages of the initial investigation.
Preliminary information indicates 15,000 individuals may have been affected.
Notwithstanding these concerns, the office says it is encouraged by the commitment from both the revenue and employment departments to implement the recommendations.
"We will expect all government departments to consider the lessons from this report in reducing the probability of a future breach of this magnitude."
This report by The Canadian Press was first published Feb. 15, 2024.
IN DEPTH
Jagmeet Singh pulls NDP out of deal with Trudeau Liberals, takes aim at Poilievre Conservatives
NDP Leader Jagmeet Singh has pulled his party out of the supply-and-confidence agreement that had been helping keep Prime Minister Justin Trudeau's minority Liberals in power.
'Not the result we wanted': Trudeau responds after surprise Conservative byelection win in Liberal stronghold
Conservative candidate Don Stewart winning the closely-watched Toronto-St. Paul's federal byelection, and delivering a stunning upset to Justin Trudeau's candidate Leslie Church in the long-time Liberal riding, has sent political shockwaves through both parties.
'We will go with the majority': Liberals slammed by opposition over proposal to delay next election
The federal Liberal government learned Friday it might have to retreat on a proposal within its electoral reform legislation to delay the next vote by one week, after all opposition parties came out to say they can't support it.
Budget 2024 prioritizes housing while taxing highest earners, deficit projected at $39.8B
In an effort to level the playing field for young people, in the 2024 federal budget, the government is targeting Canada's highest earners with new taxes in order to help offset billions in new spending to enhance the country's housing supply and social supports.
'One of the greatest': Former prime minister Brian Mulroney commemorated at state funeral
Prominent Canadians, political leaders, and family members remembered former prime minister and Progressive Conservative titan Brian Mulroney as an ambitious and compassionate nation-builder at his state funeral on Saturday.
Opinion
opinion Don Martin: Gusher of Liberal spending won't put out the fire in this dumpster
A Hail Mary rehash of the greatest hits from the Trudeau government’s three-week travelling pony-show, the 2024 federal budget takes aim at reversing the party’s popularity plunge in the under-40 set, writes political columnist Don Martin. But will it work before the next election?
opinion Don Martin: The doctor Trudeau dumped has a prescription for better health care
Political columnist Don Martin sat down with former federal health minister Jane Philpott, who's on a crusade to help fix Canada's broken health care system, and who declined to take any shots at the prime minister who dumped her from caucus.
opinion Don Martin: Trudeau's seeking shelter from the housing storm he helped create
While Justin Trudeau's recent housing announcements are generally drawing praise from experts, political columnist Don Martin argues there shouldn’t be any standing ovations for a prime minister who helped caused the problem in the first place.
opinion Don Martin: Poilievre has the field to himself as he races across the country to big crowds
It came to pass on Thursday evening that the confidentially predictable failure of the Official Opposition non-confidence motion went down with 204 Liberal, BQ and NDP nays to 116 Conservative yeas. But forcing Canada into a federal election campaign was never the point.
opinion Don Martin: How a beer break may have doomed the carbon tax hike
When the Liberal government chopped a planned beer excise tax hike to two per cent from 4.5 per cent and froze future increases until after the next election, says political columnist Don Martin, it almost guaranteed a similar carbon tax move in the offing.
CTVNews.ca Top Stories
Canadian Union of Postal Workers issues 72-hour strike notice to Canada Post
The Canadian Union of Postal Workers has given a 72-hour strike notice to Canada Post.
A Brampton woman says she is devastated after she lost more than $200,000 — her life's savings — to a romance scam.
Trump picks Kristi Noem to serve as his Homeland Security secretary
President-elect Donald Trump has selected South Dakota Gov. Kristi Noem as his next secretary of the Department of Homeland Security, according to two people familiar with the selection.
The principal of an Ottawa high school is apologizing to students, parents and guardians after an Arabic-language song was played during the school's Remembrance Day service.
Timmins-James Bay MP Charlie Angus was among approximately 120 people who gathered Sunday night for a candlelight vigil near the scene of a vicious attack against a 16-year-old in Cobalt.
Twin port shutdowns risk more damage to Canadian economy: business groups
Business groups are raising concerns about the broad effects of another round of labour disruptions in the transport sector as Canada faces shutdowns at its two biggest ports.
Judge set to rule on whether to scrap Trump's conviction in hush money case
A judge is due to decide Tuesday whether to undo President-elect Donald Trump's conviction in his hush money case because of a U.S. Supreme Court ruling on presidential immunity.
35 dead as a driver hits a crowd at sports centre in a southern Chinese city
A driver killed 35 people and injured another 43 when he deliberately rammed his car into people exercising at a sports centre in the southern Chinese city of Zhuhai, police said Tuesday.
Saudi crown prince condemns Israel's attacks on Palestinians as 'genocide'
Saudi Arabia's crown prince and de facto ruler condemned what he called the 'genocide' committed by Israel against Palestinians when he spoke at a summit of Muslim and Arab leaders on Monday.
Local Spotlight
Should Toronto tear up its bike lanes to improve traffic flow? Critics say it's not so simple
A congestion crisis, a traffic nightmare, or unrelenting gridlock -- whatever you call it, most agree that Toronto has a congestion problem. To alleviate some of the gridlock, the Ontario government has announced it plans to remove bike lanes from three major roadways.
For the second year in a row, the ‘Gift-a-Family’ campaign is hoping to make the holidays happier for children and families in need throughout Barrie.
Some of the most prolific photographers behind CTV Skywatch Pics of the Day use the medium for fun, therapy, and connection.
A young family from Codroy Valley, N.L., is happy to be on land and resting with their newborn daughter, Miley, after an overwhelming, yet exciting experience at sea.
As Connor Nijsse prepared to remove some old drywall during his garage renovation, he feared the worst.
A group of women in Chester, N.S., has been busy on the weekends making quilts – not for themselves, but for those in need.
A Vancouver artist whose streetside singing led to a chance encounter with one of the world's biggest musicians is encouraging aspiring performers to try their hand at busking.
Ten-thousand hand-knit poppies were taken from the Sanctuary Arts Centre and displayed on the fence surrounding the Dartmouth Cenotaph on Monday.
A Vancouver man is saying goodbye to his nine-to-five and embarking on a road trip from the Canadian Arctic to Antarctica.