Canada Revenue Agency — Cyber Attacks, Breaches & Threat Activity

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
May 7, 2026
Last Seen
August 8, 2026

Related Threat Clusters

  • Jacob Butler Arrested for Operating KimWolf DDoS Botnet

    Jacob Butler, a 23-year-old from Ottawa, Canada, was arrested for operating the KimWolf DDoS botnet, which infected over 2 million devices worldwide. The botnet utilized a DDoS-for-hire model, launching more than 25,000…

    22 articles · Updated May 21, 2026
  • Over 42,000 Data Breaches Affect Canadian Taxpayers' Accounts

    Since 2020, the Canada Revenue Agency (CRA) has reported over 42,000 data breaches affecting taxpayer accounts, as revealed by the Office of the Privacy Commissioner (OPC). The breaches, classified as Unauthorized Use…

    3 articles · Updated May 11, 2026
  • Canada Settles $8.7M Class-Action Over CRA Data Breach Affecting 47,000 Accounts

    The Canadian federal government has agreed to pay $8.7 million to settle a class-action lawsuit concerning a data breach that compromised the personal information of over 47,000 Canadians. The breach occurred between…

    9 articles · Updated May 7, 2026
  • Credential Stuffing Attacks Target CRA and GCKey Accounts

    In early August 2020, the Government of Canada faced credential stuffing attacks targeting the GCKey service and Canada Revenue Agency (CRA) accounts. Attackers exploited usernames and passwords from previous breaches…

    2 articles · Updated August 8, 2026

Recent Intelligence Reports

  • according to the federal tax agency. — www.canada.ca · August 8, 2026
  • U.S. officials seeking extradition of Ottawa man accused of record cyberattack — Ca.News.Yahoo · May 22, 2026
  • Canada's tax agency logged 42,000 data breaches it couldn't explain — Wealthprofessional.Ca · May 11, 2026
  • Canadian taxpayers' info hacked in over 42000 CRA account data breaches — Dailyhive · May 9, 2026
  • Ottawa agrees to $8.7M settlement over CRA-related data breach — Insurancebusinessmag · May 8, 2026
  • Canadian government to pay $8.7M to settle data breach class — Uk.News.Yahoo · May 7, 2026

CVSS v3.1 Breakdown