Canada's Privacy Commissioner Philippe Dufresne has released a report revealing thousands of breaches of tax accounts, urging the government to implement stronger protections for taxpayer data. The report, published on Wednesday, highlights significant vulnerabilities in the Canada Revenue Agency's systems that have led to unauthorized access to sensitive financial information.
Scope of the breaches
The investigation found that between 2020 and 2025, there were over 3,200 confirmed breaches of tax accounts, affecting thousands of Canadians. These breaches involved unauthorized access to personal information such as Social Insurance Numbers, income details, and banking data. The commissioner noted that many of these incidents could have been prevented with better security protocols.
Recommendations for improvement
Dufresne's report includes several key recommendations to enhance security, including the implementation of multi-factor authentication for all tax account access, improved monitoring systems to detect suspicious activity, and mandatory reporting of breaches to affected individuals within a shorter timeframe. The commissioner also called for increased funding for cybersecurity measures at the CRA.
“Taxpayers trust the government with their most sensitive personal information, and that trust has been broken,” Dufresne said during a news conference in Ottawa. “We need immediate action to prevent further breaches and restore public confidence.”
Government response
In response to the report, the federal government has pledged to review the recommendations and work with the CRA to strengthen security measures. A spokesperson for the Minister of National Revenue stated that the government is committed to protecting taxpayer data and will provide an update on implementation plans within 90 days.
The privacy watchdog's findings come amid growing concerns about data security in government agencies. The report is expected to spark further debate on privacy rights and the need for robust protections in the digital age.
