Skip to content
Join our Newsletter

Internet bug shuts down online tax agency services

OTTAWA - A major international security concern has forced the shutdown of electronic filing services at the Canada Revenue Agency, and there are concerns the problem could affect other government systems as well.
CRA

OTTAWA - A major international security concern has forced the shutdown of electronic filing services at the Canada Revenue Agency, and there are concerns the problem could affect other government systems as well.

The tax agency temporarily cut off public access to its electronic services Wednesday, saying the action was taken as a precaution.

"We have received information concerning an Internet security vulnerability named the Heartbleed Bug," the agency said in a statement posted on its website.

"As a preventative measure, the CRA has temporarily shut down public access to our online services to safeguard the integrity of the information we hold."

The affected services include EFILE, NETFILE, My Account, My Business Account and Represent a Client.

The agency said it is working to restore safe and secure access as soon as possible.

It was unclear just how long it might take to ensure the agency's computers are secure, but Revenue Minister Kerry-Lynne Findlay indicated it could be some time before the system was back up and running, noting that the agency would post updated information on its website "daily."

"We're investigating, we're working on it," Findlay told reporters.

However long it takes, the revenue agency tried to reassure tax filers Wednesday, suggesting that people unable to file on time as a result of the shutdown would not be penalized.

"Please note that consideration will also be given to taxpayers who are unable to comply with their filing requirements because of this service interruption," the agency said on its website.

It is a busy time of year for the tax agency, as people file returns electronically and track the progress of refunds online.

As of the end of March, the agency had received 6.7 million returns, with 84 per cent filed electronically.

The computer bug was reportedly detected last week by Internet security experts in Finland and researchers at Google, but only revealed widely within the online security community on Monday.

Heartbleed affects open-source software called OpenSSL that's at the very core of millions of applications used to encrypt Internet communications.

And experts warn that its impact on consumers could be significant.

It can reveal the contents of a computer server's memory, including private data such as user names, passwords, and credit card numbers.

But the bug also allows hackers to obtain copies of a server's digital keys, and use them to impersonates other servers and fool people into thinking they are using a legitimate website.

While the problem is international in nature, Opposition NDP Leader Tom Mulcair was quick to pounce on the Harper Conservatives for failing to adequately protect and provide services to Canadians.

"The Conservatives are such poor public managers that they can't deliver the grain, they can't even deliver the mail and now at tax time they can't even communicate with Canadians through the revenue agency," Mulcair said.

Liberal Leader Justin Trudeau, however, was prepared to cut the Tories some slack, saying he would support any measures need to battle the bug.