Treasury Board to provide details on federal website security 'vulnerability'

Hacking threat prompts CRA to take some online services down Add to ...

The tax agency going offline prevented Canadians from filing their taxes online over the weekend, but will likely not cause a delay in processing and the agency will not extend the filing deadline, it said.

Advertisment The Canada Revenue Agency took its online services down Friday afternoon, after discovering an "internet vulnerability that affects some computer servers used by websites worldwide".

Patrick Samson says the CRA isn't aware of any personal information being affected, but says the agency will monitor the situation.

Among the services affected by the decision were: My Account, My Business Account, Represent a Client, the MyCRA mobile application, the MyBenefits mobile application, Netfile, EFILE and Auto-Fill My Return.

According to a later statement posted on the agency's website, all digital services had been restored by 5 PM on Sunday, with individuals, businesses, and accountants once again able to file returns and make payments, among other services, through the website.

He says people can prepare their income tax and benefit returns, and electronically file when the services come back online.

The flaw became widely known last week and can use "remote code execution" to add malicious files or delete legitimate ones and security researchers say it is being exploited actively and widely.

While the CRA did shut down some services, Samson noted there was never a successful hack of their systems.

"We are working to bring our online services back up as soon as possible".

Related news: