RCMP charge teen in Heartbleed CRA attack

A London, Ont. teenager is facing mischief charges in relation to the alleged theft of confidential information using the Heartbleed bug at the Canada Revenue Agency.

Insurance News

By

A London, Ont. teenager is facing mischief charges in relation to the alleged theft of confidential information using the Heartbleed bug at the Canada Revenue Agency.

In a statement just released today, the RCMP’s national division said it has arrested Stephen Arthuro Solis-Reyes of London, Ont., on one count of unauthorized use of a computer and one count of mischief in relation to data.

The CRA reported on Monday that 900 Social Insurance Numbers had been taken just before it shut down its website last Wednesday. The loss was detected last Friday, but the agency held off releasing the information to Canadians at the request of the RCMP, while it conducted an investigation.

The CRA, and several other government websites, shutdown online services - including the popular tax-filing systems EFILE and NETFILE - due to the threat posed by the Internet encryption bug, Heartbleed,  which affects OpenSSL used software used by two-thirds of website providers to provide security and privacy to users.

The agency said it will notify those affected by the security breach by registered letter and offer free additional protection services. It has also extended tax filing deadlines to May 5 due to the five-day service disruption.

See related article, 'Is your brokerage prepared for heartbleed?'
 

Keep up with the latest news and events

Join our mailing list, it’s free!