The Canadian Press - ONLINE EDITION

Canadians wary of income-tax security even before Heartbleed bug hit: report

  • Print

OTTAWA - The Internet bug known as Heartbleed that surfaced in early April hit the Canada Revenue Agency just as it was trying to expand its online services for individual taxpayers.

Focus groups consulted in the weeks before word of the bug triggered a five-day shutdown of income-tax servers suggest Canadians were already wary of online security at the agency.

The bug forced the agency to suspend its online tax-filing system on April 8, the height of tax season, and led to the theft of about 900 social insurance numbers from Canadians who had used the service.

The major security breach happened shortly after a focus-group project asked Canadians whether they would use new online services allowing them to submit receipts and other documents electronically, and to transfer money directly to the government online.

"The only concern mentioned with some frequency ... was security of personal information," says a March report, commissioned from Phoenix Strategic Perspectives Inc. for $53,000.

"Participants queried the secureness of the service and wondered about the potential for security breaches and loss of privacy."

The agency is examining whether individual Canadians would use a payment system that allows money to be sent directly to the government without a financial institution as an intermediary, as is done by some businesses already.

Many participants told Phoenix they did not trust the Canada Revenue Agency, and worried the government could access private financial information or even withdraw money without approval.

There was more support for the online document-transfer service, but concerns about security remained.

A spokesman for the agency says the theft of the 900 social insurance numbers has apparently not led to any further crime.

"To date, the CRA has no evidence of fraud or theft in relation to any taxpayer affected by the compromise of CRA systems," Philippe Brideau said in an email.

"The agency has also applied additional protections to the CRA accounts of all affected individuals to prevent any unauthorized activity."

Brideau said almost a million tax returns were filed in the first 24 hours after the online service was restored April 13, when a Heartbleed patch was finally installed.

The total number of returns filed online as of last week is over 21 million, or 80 per cent of all returns received, compared with 76 per cent last year. The agency hit the 80 per cent threshold earlier than its 2016-17 target.

"Clearly, taxpayers have confidence in the security of CRA's online services," he said.

Brideau added that the Heartbleed episode has not delayed or changed the agency's plans to expand online services for individuals.

The RCMP have charged Stephen Arturo Solis-Reyes, 19, of London, Ont., in connection with the Heartbleed breach at the agency.

The agency came under criticism for taking more than a day to suspend its online service after learning of security warnings about the bug.

The Canada Revenue Agency has been pressing more Canadians to use the online filing service largely because electronic returns cost only 80 cents to process, compared with $3.20 for paper returns that must be manually keyed or scanned.

Follow @DeanBeeby on Twitter

Fact Check

Fact Check

Have you found an error, or know of something we’ve missed in one of our stories?
Please use the form below and let us know.

* Required
  • Please post the headline of the story or the title of the video with the error.

  • Please post exactly what was wrong with the story.

  • Please indicate your source for the correct information.

  • Yes

    No

  • This will only be used to contact you if we have a question about your submission, it will not be used to identify you or be published.

  • Cancel

Having problems with the form?

Contact Us Directly
  • Print

You can comment on most stories on winnipegfreepress.com. You can also agree or disagree with other comments. All you need to do is be a Winnipeg Free Press print or e-edition subscriber to join the conversation and give your feedback.

You can comment on most stories on winnipegfreepress.com. You can also agree or disagree with other comments. All you need to do is be a Winnipeg Free Press print or e-edition subscriber to join the conversation and give your feedback.

Have Your Say

New to commenting? Check out our Frequently Asked Questions.

Have Your Say

Comments are open to Winnipeg Free Press print or e-edition subscribers only. why?

Have Your Say

Comments are open to Winnipeg Free Press Subscribers only. why?

The Winnipeg Free Press does not necessarily endorse any of the views posted. By submitting your comment, you agree to our Terms and Conditions. These terms were revised effective April 16, 2010.

letters

Make text: Larger | Smaller

LATEST VIDEO

Your top TV picks for this weekend - Aug 29 - Sept 1

View more like this

Photo Store Gallery

  • PHIL HOSSACK / WINNIPEG FREE PRESS 060710 The full moon rises above the prairie south of Winnipeg Monday evening.
  • A mother goose has chosen a rather busy spot to nest her eggs- in the parking lot of St Vital Centre on a boulevard. Countless cars buzz by and people have begun to bring it food.-Goose Challenge Day 06 - May 08, 2012   (JOE BRYKSA / WINNIPEG FREE PRESS)

View More Gallery Photos

Poll

What do you think of the new school-zone speed limit?

View Results

View Related Story

Ads by Google