News Summary

A significant cybersecurity breach involving Interac’s 2Keys Corporation has exposed the email addresses and phone numbers of nearly one million Canadians. This breach affected accounts associated with the Canada Revenue Agency (CRA), Employment and Social Development Canada (ESDC), and Canada Border Services Agency (CBSA). Hackers exploited a vulnerability introduced during a routine software update to access 881,000 phone numbers and more than 85,000 email addresses. The data was subsequently used in a phishing campaign, with criminals sending fraudulent text messages directing recipients to a fake Government of Canada website. Despite the scale of the breach, officials stated that no additional personal identifiable information was compromised, and the incident was categorized as a ‘non-material privacy incident.’ Interac detected the breach within two days, informed Ottawa, and patched the system while launching an investigation.