Federal government says emails, phone numbers accessed in cyberattack

OTTAWA — The federal government says individuals' email addresses and phone numbers associated with Canada Revenue Agency, Employment and Social Development Canada and Canada Border Services Agency accounts were accessed in a cyberattack.

The Treasury Board of Canada Secretariat says the government was alerted to the cyber incident on Aug. 17 by 2Keys Corporation, the provider of a multi-factor authentication application used for the accounts.

The government says 2Keys Corporation discovered the incident, promptly informed the government and launched an investigation, which is being conducted with external cybersecurity experts.

Treasury Board says a routine software update caused a "vulnerability" that allowed a malicious actor to access phone numbers associated with CRA and ESDC accou