The Canada Revenue Agency (CRA) has discovered that hackers obtained hundreds of people’s CRA credentials and eventually stole $6 million from bogus refunds.
Getting access to people’s CRA accounts might sound like it won’t do much good to hackers. Besides obtaining personal data, including user names and passwords, it’s not like breaching a banking account. But the reality is very different, and the attackers knew what they were doing.
According to an investigation by CBC’s The Fifth Estate
