Murray Wood: Isn't it time for more 'we' than 'oui' in Rideau Hall?
Louise Arbour brings much more than French skills to her role as the king's representative, but she also has taken contr...
The federal privacy watchdog says there have been more than 42,000 breaches at the Canada Revenue Agency since 2020 as a result of people gaining unauthorized access to, or modifying, taxpayer information.
In a special report tabled in Parliament, privacy commissioner Philippe Dufresne points to gaps in the revenue agency’s prevention, monitoring, detection and handling of breaches.
Read more:
- Ottawa says Louise Arbour to be installed as governor general on June 8
- Government expects $140M in savings this year with refugee health care co-pay
- Dozens of passengers left hantavirus-stricken cruise ship after 1st fatality
Dufresne found the agency couldn’t provide details of every confirmed breach due to limitations in its tracking systems and the overall volume of incidents.
The commissioner’s office says the agency did not implement mandatory multi-factor authentication — a means of helping people bolster account security — in a timely manner and did not consistently rely on methods considered to be best practices.
It also says the agency could not always adequately explain how attackers managed to bypass authentication processes.
The commissioner made nine recommendations for improvement, eight of which were accepted in full and one in part by the revenue agency.
This report by The Canadian Press was first published May 7, 2026.
