E-services updates

Security vulnerability

December 14, 2021

All of our digital services are now available. We want to assure you that this precautionary service disruption was done to protect taxpayer information and CRA systems. There is currently no indication that CRA systems have been compromised, or that there has been unauthorized access to taxpayer information because of this vulnerability.

We thank Canadians for their patience as we worked to secure our systems from potential threats.

December 13, 2021

Please find an update regarding the status of CRA digital services:

The Government of Canada became aware of the Apache Log4j vulnerability on Friday, December 10, 2021. As a precautionary measure the CRA disabled access to its digital services, such as My Account, My Business Account and Represent a Client, in order to protect taxpayer information and CRA systems against potential threats.

There is currently no indication that CRA systems have been compromised, or that there has been unauthorized access to taxpayer information because of this vulnerability.

Most of our digital services have been restored as of Monday, December 13, 2021. The following service continues to be unavailable and we will update when it is online:

• Order forms and publications

While these services are unavailable, please contact us for assistance.

We wish to reiterate that this situation is not unique to the CRA, and it is the result of a broader security vulnerability that is impacting organizations around the world.

We thank Canadians for their patience.

December 11, 2021

The Canada Revenue Agency (CRA) is committed to protecting the personal and tax information of Canadians. This includes taking appropriate steps to safeguard sensitive information online.

On December 10, 2021, the CRA became aware of a security vulnerability affecting organizations around the world. As a precaution, we proactively decided to take our online services offline while we work to secure our systems against potential threats.

There is currently no indication that CRA systems have been compromised, or that there has been unauthorized access to taxpayer information because of this vulnerability.

We understand that this interruption may be inconvenient to some Canadians. Our services will be available as soon as possible. We apologize for the inconvenience, and thank Canadians for their patience as we work to resolve the situation.

December 10, 2021

The CRA has become aware of a security vulnerability affecting organizations around the world. As a precaution, we have proactively decided to take our systems offline while we work to secure our systems.

There is currently no indication that CRA systems have been compromised, or that there has been any unauthorized access to taxpayer information because of this vulnerability.

Our services will be available as soon as possible. We apologize for the inconvenience, and thank Canadians for their patience as we work to resolve the situation.