
Identity Theft Nightmare: CRA Accounts Hacked After Major Data Breach
Hey everyone, I want to talk about something serious that’s happening right now — a massive data breach that’s led to thousands of CRA (Canada Revenue Agency) accounts being hacked. This isn’t just a distant cybercrime headline. It’s affecting real people, right here in Canada. Over 28,000 social insurance numbers were stolen after a data breach involving the British Columbia government's Interior Health Authority. And the fallout? It’s personal, devastating, and ongoing.
Let me walk you through just one story. Leslie Warner, a nurse from Fernie, B.C., was arrested back in 2022 — charged with social security fraud. Imagine being fingerprinted and taken in by the RCMP for something you didn’t do. She later found out her identity had been stolen years earlier. Someone hacked her CRA account, filed a bogus tax return in her name, and falsely listed H&R Block as her authorized representative. Warner never gave them that permission. But the damage had already been done.
Turns out, Leslie’s not alone. The Fifth Estate dug into this and found her name on a leaked list of over 28,000 current and former Interior Health employees whose personal information — including social insurance numbers, birthdates, and home addresses — had been stolen. This information, according to a source going by the name “Anonymous,” has been sold on the dark web for years. Anonymous claims to have bought this data from sellers on encrypted Telegram channels as far back as 2017.
Also Read:- Lake Bell Opens Up About Co-Parenting, Parenting Lessons, and Her Inspiring New Book
- Sister Showdown in Stuttgart: Mirra Andreeva’s Road to Glory Begins at Home
The implications are huge. Fake tax returns, fraudulent loans, stolen identities, and people’s entire financial lives turned upside down. One nurse from Penticton even discovered she had been listed as the director of two fake companies. These shell businesses were then used to create bogus T4s and scam CRA into paying out fraudulent refunds.
And what’s worse? The CRA’s system itself seems vulnerable, particularly when it comes to third-party tax filing companies like H&R Block. Internal memos from H&R Block even showed the company was aware of these types of fraud happening at their Alberta locations — yet publicly, they claim there’s no evidence of unauthorized use of their EFILE credentials.
What’s even more concerning is the response. While Interior Health says the breach dates back to 2009 and that they’ve upgraded their systems, many affected employees only learned about the breach through media reports or investigations like The Fifth Estate. Some say they were told by Interior Health that they weren’t on the compromised list, despite clear evidence to the contrary.
There’s still a lot we don’t know — like exactly how long this has been going on, or how many people have had their identities stolen without even realizing it yet. But one thing is clear: this isn’t just a breach. It’s a breach of trust — in our institutions, in our data systems, and in the safety nets we expect to protect our most sensitive information.
So if you or someone you know worked for Interior Health between 2003 and 2009, check in with them. Make sure your CRA account is secure. And keep asking the tough questions. Because if we don’t, this kind of thing will just keep happening.
Stay safe out there.
Read More:
0 Comments