ARTICLE · 03 OCTOBER 2025

What Canada's Recent CRA Cyber Incident Means For You

Bateman MacKay LLP

Explore more from Bateman MacKay LLP

A recent cybersecurity incident involving taxpayer contact information was disclosed by the Federal Government. Individuals and businesses should remain alert and follow established cybersecurity best practices.

CanadaTechnology

Bateman MacKay LLP

Author LinkedIn connections

A recent cybersecurity incident involving taxpayer contact information was disclosed by the Federal Government. Individuals and businesses should remain alert and follow established cybersecurity best practices.

What happened?

OnSeptember 9, 2025, the Federal Governmentreleased a statement regarding adata security incidentinvolvingnon-sensitive personal information. Specifically:

Phone numbers linked to certainCanada Revenue Agency (CRA)andEmployment and Social Development Canada (ESDC)accounts, and
Email addresses associated withCanada Border Services Agency (CBSA)accounts

were accessed during a window of exposure (August 3 to August 15, 2025) caused by a software update vulnerability.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

The Prevalence Of Open Models In AI: Emerging Trends And Legal Considerations

CanadaTechnology

Osler, Hoskin & Harcourt LLP

The Stablecoin Era: Canada Proposes Stablecoin Regulations And Expands The Payment Regulatory Framework

CanadaTechnology

Borden Ladner Gervais LLP

Tokenized Investment Funds In Canada

CanadaTechnology

Osler, Hoskin & Harcourt LLP

Who Is Legally Responsible When AI Agents Go Rogue?

CanadaTechnology

Davies Ward Phillips & Vineberg LLP

Estate Essentials: Griefbots – AI And The Afterlife

CanadaTechnology

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

Comparative Guide

Artificial Intelligence

Comparative Guide

Blockchain & Crypto Assets

Comparative Guide

Fintech

See more popular content from

Technology

Bill C-26: New Cyber Security Obligations For Canadian Businesses Vital To National Security And Public Safety

The COVID-19 pandemic has highlighted the extent to which the Canadian economy is reliant on digital connectivity. With a recent increase in remote-work options being offered...

CanadaTechnology

New Cybersecurity Regulations Coming Soon: What You Need To Know

On May 31, 2025, the Government of Alberta's Security Management for Critical Infrastructure Regulation (the Regulation), under the Responsible Energy Development Act (the Act), will come into force.

CanadaTechnology

Burnet, Duckworth & Palmer LLP

New AI Safety Standard Relevant To Canadian School Boards

A major U.S. vendor agreement has established a rigorous new AI safety standard for educational technology, prohibiting the use of student data for AI training and enforcing strict data minimization. While the standard does not directly bind vendors in Canada, Canadian school boards can leverage this precedent to demand equivalent contractual protections and strengthen their own AI governance frameworks.

CanadaTechnology

Borden Ladner Gervais LLP

AI Is Making Translation Faster. It’s Also Making It More Complex.

As AI translation becomes more capable, organizations have more choices to make. Which technology is right for the work? Where can AI deliver the speed and efficiency you need?

CanadaTechnology

Managing The AI Risks In The Financial Sector: OSFI’s Bulletin On Generative And Agentic Artificial Intelligence

OSFI has issued new guidance for federally regulated financial institutions on the risks and governance of generative and agentic artificial intelligence. Published on July 13, 2026...

CanadaTechnology

McCarthy Tétrault

AI Governance: What Organizations Need To Know In 2026

Artificial intelligence has moved from pilot projects to core operations for many Canadian organizations.

CanadaTechnology

Alberta Confirms New AI Data Centre Levy

The Government of Alberta recently confirmed its plan to implement a data centre levy framework as part of its broader AI Data Centre Strategy. The levy framework requires that large-scale data...

CanadaTechnology

Borden Ladner Gervais LLP

Moffatt v Air Canada: Bot Betrayal And Negligent Misrepresentation

For the most part, waiting to speak to a human customer service representative has become a thing of the past.

CanadaTechnology

Can Statements By Client-Facing AI Chatbots Bind Their Owners? (Moffatt v. Air Canada)

More and more corporations are using client-facing Artificial Intelligence Chatbots to respond to client inquiries. Although these Chatbots can enhance customer service...

CanadaTechnology

Gardiner Roberts LLP

Click, Breach, Repeat? Cybersecurity Wake-Up Call For Manitoba Municipalities

The recent Auditor General Report on Municipal Allegations and Gaps in Provincial Oversight released on August 28, 2025, emphasized that cybersecurity should not just be "on the radar" for municipalities...

CanadaTechnology

Thompson Dorfman Sweatman LLP