Canada’s IRS Gets Hacked

The sort-of good news (such as it is) is that the CRA knows which accounts were affected and it is sending a registered letter to every person to inform them of the data theft. The agency has also set up a dedicated toll-free phone line to provide the affected people with additional information, “including what steps to take to protect the integrity of their SIN.”

And one other step the CRA is taking:

The Agency will not be calling or emailing individuals to inform them that they have been impacted – we want to ensure that our communications are secure and cannot be exploited by fraudsters through phishing schemes.

The government will also provide people whose numbers were stolen with free credit protection services.

The CRA websites were put back into operation on Sunday.