GCKey

Government of Canada response to OPC Report on 2020 Cyber Attacks

Retrieved on: 
Thursday, February 15, 2024

The Government of Canada welcomes the Office of the Privacy Commissioner's (OPC) report of findings on the 2020 cyber attacks against the Government of Canada.

Key Points: 
  • The Government of Canada welcomes the Office of the Privacy Commissioner's (OPC) report of findings on the 2020 cyber attacks against the Government of Canada.
  • In August 2020, the government quickly responded to cyber attacks made against Employment and Social Development Canada's (ESDC) GCKey service and the Canada Revenue Agency's (CRA) Authentication Management System/Credential Management System.
  • For example, the Government of Canada has proactively implemented multi-factor authentication for key online services and updated the Government of Canada Cyber Security Event Management Plan to help strengthen and coordinate efforts to prevent and respond to cyber incidents impacting the Government of Canada and its systems.
  • The Government of Canada takes the privacy rights of Canadians seriously and is continuously adopting measures to safeguard their personal information held by government institutions.

NOTICE OF CERTIFICATION - Government of Canada Privacy Breach Class Action

Retrieved on: 
Friday, August 18, 2023

If you used a Government of Canada Online Account, such as CRA's My Account, a "My Services Canada" account, or various other online government accounts in the past, this Notice of Certification may affect your legal rights.

Key Points: 
  • If you used a Government of Canada Online Account, such as CRA's My Account, a "My Services Canada" account, or various other online government accounts in the past, this Notice of Certification may affect your legal rights.
  • You may receive more than one Notice of Certification due to potential unauthorized access to more than one of your Government of Canada online accounts.
  • Among other things, the Plaintiff alleges that the Government of Canada breached class members' privacy by not properly safeguarding confidential personal and financial information electronically housed within various online government portals.
  • "Government of Canada Online Account" means:
    a) Canada Revenue Agency account;
    b) My Service Canada account; or
    c) another Government of Canada online account, where that account is accessed using the Government of Canada Branded Credential Service (GCKey).