Canada Revenue Agency Heartbleed theft of social insurance numbers
| Disclosed |
April 14, 2014
|
|---|---|
| Sector |
Government
|
| Province or territory |
Across Canada
|
| People affected |
900
|
| Data exposed |
About 900 social insurance numbers, and possibly some other data, taken from the CRA's online services during a six-hour window through the Heartbleed flaw in OpenSSL. The CRA shut its online services, patched them and offered free credit protection to the people affected. The RCMP charged a man from London, Ontario.
|
| Cause |
Unpatched vulnerability
|
| Status |
Resolved
|
| Sources |
