Social insurance numbers stolen via Heartbleed bug

The Canada Revenue Agency says roughly 900 social insurance numbers were stolen during last week’s Heartbleed bug breach.

The CRA says the breach took place during a six-hour period after the security flaw was discovered. It says everyone affected will receive a registered letter and free access to credit protection services.

This comes a day after the federal tax agency went back online after blocking public access for five days. The Heartbleed bug is caused by a flaw in open SSL software, which is commonly used on the internet to provide security and privacy.