Tens of thousands of taxpayer accounts hacked as CRA repeatedly paid out millions in bogus refunds
CBC
At the height of this year's tax season, the Canada Revenue Agency discovered that hackers had obtained confidential data used by one of the country's largest tax preparation firms, H&R Block Canada.
Imposters used the company's confidential credentials to get unauthorized access into hundreds of Canadians' personal CRA accounts, change direct deposit information, submit false returns and pocket more than $6 million in bogus refunds from the public purse, an investigation by CBC's The Fifth Estate and Radio-Canada has found.
In one case, the hackers filed a return with a legitimate postal code, but a fake address on a non-existent Tomato Street.
"Obviously the door is open and some people are infiltrating the system," André Lareau, an associate tax professor at Laval University in Quebec City, said in an interview. "But the CRA does not seem to have found the key to lock the door."
According to sources, the crisis prompted the CRA to contact the office of Revenue Minister Marie-Claude Bibeau.
The agency prepared media lines to respond to inquiries should there be questions about the breach of H&R Block data and why the agency paid out millions to scammers.
In the end, the public was never alerted to the scheme.
Bibeau declined The Fifth Estate/Radio-Canada's request for an interview.
In a statement, H&R Block said there is no evidence the breach came from it.
The tax firm said a "comprehensive internal investigation" concluded none of its "data, systems, software and security" had been compromised. H&R Block said it is not aware that the Canadian taxpayers impacted by the breach were any of its own clients.
According to sources, the CRA failed to identify the hackers, but ruled out the possibility of a breach of its own systems or insider involvement. Ultimately, who hacked that data and where from remains unknown.
Both the revenue minister and CRA's media relations office did not respond to questions about the H&R Block data breach.
The Fifth Estate and Radio-Canada are not identifying the sources because they are not authorized to speak publicly.
The investigation by The Fifth Estate and Radio-Canada has found that the H&R Block data breach is just one example of many that are overwhelming the CRA, as auditors and investigators worry the public might lose trust in the agency tasked with safeguarding its taxpayer dollars and personal information.
A long-serving United Church minister is preparing to leave his pulpit, adding pressure at a time when filling vacancies has become increasingly difficult.
Garrett Hawkins is on the cusp of making it to the big leagues. The pitcher from Biggar, Sask., has been added to the San Diego Padres 40-man roster.
Charlottetown Police and Fire Services are asking residents to avoid areas around Green Street due to a structure fire on Sunday morning.
Despite being born on a Christmas tree farm in Ohio, he wasn't really a fan of the holiday season.
A Hamilton hospital network is taking a closer look at how psychedelics might be useful in medicine.
Most people would prefer to spend the Christmas holiday weekend in warmth and comfort — but a Philadelphia man is going to spend it trudging 120 kilometres in the cold across Windsor-Essex.
Long before the first Calgary Stampede, the city attracted a different kind of cowboy.
After waiting four years to get his son the support the family says he needs to navigate school with learning challenges, a father from London, Ont. is fighting to make equitable healthcare and education a fundamental right.
Waterloo region and Guelph are under two yellow weather alerts warning of freezing rain changing to heavy rainfall Sunday, Environment Canada says.
A survey recently conducted on Prince Edward Island turned up a type of freshwater snail that experts say has never before been identified in the Maritimes.
A downtown Toronto long-term care home is rebuilding with a new design that considers lessons learned from the COVID-19 pandemic, going beyond the province’s standards — but some say those standards are out of date.
It’s another wet and stormy day for much of Newfoundland and Labrador.
It’s been years since the tiny but aggressive European green crab made its way over to the Magdalen Islands, and some researchers in Quebec are warning it could be headed for the Gaspé next.