Canada Freezes Online Tax Filing Due to Heartbleed Bug

What's This?

Image: Mashable composite, Heartbleed

By Lorenzo Franceschi-Bicchierai2014-04-09 15:03:24 UTC

Canada's tax authority shut down its online tax-filing services on Tuesday night to safeguard taxpayers' information after the major security bug Heartbleed was exposed.

See also: Web Security: Why You Should Always Use HTTPS

Canada's Revenue Agency (CRA) temporarily blocked access to its online tax filing services as a "preventative" measure to "safeguard the integrity of the information we hold," a spokeswoman told the The Wall Street Journal . "The measure was taken as "a precaution until the agency can be sure the risks have been eliminated."

Heartbleed is an encryption security bug affecting the servers using the popular OpenSSL software, which estimates say it's used by two thirds of the entire Internet. The bug potentially exposes sensitive information such as passwords or credit card numbers that is supposed to be protected. Many websites have patched the bug already, but others are still in the process of updating their servers.

The CRA provided the following statement to The Toronto Star :

The Canada Revenue Agency (CRA) places first priority on ensuring the confidentiality of taxpayer information.

We have received information concerning an Internet security vulnerability named the Heartbleed Bug. As a preventative measure, the CRA has temporarily shut down public access to our online services to safeguard the integrity of the information we hold. Applications include online services like EFILE, NETFILE, My Account, My Business Account and Represent a Client.

The CRA recognizes that this problem may represent a significant inconvenience for individual Canadians, representatives and businesses that count on the CRA for online information and services. Please be assured that we are fully engaged in resolving this matter and restoring online services as soon as possible in a manner that ensures the private information of Canadians remains safe and secure.

Please note that consideration will also be given to taxpayers who are unable to comply with their filing requirements because of this service interruption.

We are committed to investigating any potential impacts to taxpayer information. We will provide further information and daily updates at 3PM EST on our home page until the situation is resolved.

The filing services will be down until further notice.

Have something to add to this story? Share it in the comments.

Topics: Canada, heartbleed, OpenSSL, ssl, US & World, World