Heartbleed Hits Revenue Canada With Stolen SINs

The infamous Heartbleed bug has the entire Internet spooked and just today, CBC News in Canada is reporting that 900 social insurance numbers (SIN) were stolen from the Canada Revenue Agency’s database.


Photo: James A. Kost / Shutterstock

The report says that the theft happened during a six hour period where technicians were attempting to fix the bug.

“Social Insurance Numbers (SIN) of approximately 900 taxpayers were removed from CRA systems by someone exploiting the Heartbleed vulnerability,” the CRA said. “We are currently going through the painstaking process of analyzing other fragments of data, some that may relate to businesses, that were also removed.”

The CRA goes on to say that they will be contacting people affected via registered mail and any contact made through email or phone is fraudulent and should be ignored.

The agency had shut down its web services as a precautionary measure last week in response to the Heartbleed bug but it would appear the measure was not totally effective. The CRA says it is investigating.