Overview
The **Heartbleed CRA deadline 2013** was a critical period for Canadian taxpayers, as the Heartbleed bug, a severe vulnerability in the OpenSSL cryptographic software library, compromised the security of many online services, including the Canada Revenue Agency’s (CRA) electronic filing systems. This widespread security flaw necessitated immediate action from the CRA to protect sensitive taxpayer data and led to a temporary extension of tax filing deadlines. The incident highlighted the importance of robust cybersecurity measures and their direct impact on public services and individual compliance.
- Impact: The Heartbleed bug exposed a significant vulnerability, allowing attackers to steal sensitive information, including usernames, passwords, and other confidential data, from affected servers. This directly impacted the CRA’s ability to securely process tax returns, prompting a necessary response to safeguard taxpayer information.
- CRA Response: In response to the threat, the CRA temporarily shut down its online services to patch the vulnerability and ensure data integrity. This proactive measure was crucial for protecting Canadians’ personal and financial data from potential breaches.
- Deadline Extension: Due to the service interruption and the need for taxpayers to verify the security of their own systems, the CRA announced an extension to the 2013 tax filing deadline. This provided individuals and businesses with additional time to file their returns without penalty, acknowledging the extraordinary circumstances caused by the bug, as further detailed in understanding the extension.
Heartbleed Bug: Understanding the CRA Tax Deadline Extension
As you may have heard, Canada Revenue Agency (CRA) extended the 2013 personal tax return deadline to May 5th, 2014.
This was due to a security issue, known as the Heartbleed bug vulnerability. This vulnerability affected how usernames and passwords were encrypted when logging into “secure” websites. Thus, allowing hackers the potential to steal private information.
When CRA became aware of the Heartbleed vulnerability, they took steps to protect taxpayers by shutting down all electronic systems, including EFILE and NETFILE. During that time, CRA decided to extend the filing deadline by the number of days that there was service disruption, which allowed taxpayers to file and pay by May 5th, 2014, without interest and penalties.
We are aware of some people who have been charged interest as a result of CRA’s automated mail out systems even though payment was made prior to May 5th. If you have been charged interest or penalties even if you paid or filed prior to May 5th please contact the taxpayer relief department of CRA to have this adjusted or let us know and we can contact them on your behalf.
Although CRA took steps to prevent “hackers” from stealing confidential taxpayer information, they were not completely successful, as 900 Canadian Social Insurance Numbers (SIN) were stolen. CRA has stated that each affected taxpayer will receive a registered letter informing them of the breach. The letter will also include a 1-800 number that they can call to get further information, including what steps they can take to protect the integrity of their SIN, as well as how they can access credit protection services at no cost.
Although there has been a fix for the Heartbleed vulnerability a number of websites have been affected. See link http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/ for affected websites. Accordingly, it is extremely important that you change your usernames and passwords to make sure that you have not been compromised at any time during the Heartbleed vulnerability.
If you would like more information or have any questions, feel free to contact us at 780.466.6204, or info@kwbllp.com.
Thanks to Johnny Kwong of KWB Chartered Accountants for providing this article.