Canadian charged in Heartbleed data theft

2014-04-17 09:45
A scandal has engulfed South Korea's spy agency. (Duncan Alfreds, News24)

A scandal has engulfed South Korea's spy agency. (Duncan Alfreds, News24)

Multimedia   ·   User Galleries   ·   News in Pictures Send us your pictures  ·  Send us your stories

Ottawa - Police have charged a 19-year-old Canadian man in connection with the loss of taxpayer data from Canada's tax agency website.

The Royal Canadian Mounted Police said on Wednesday that Stephen Arthuro Solis-Reyes was arrested at his residence on Tuesday and is charged with unauthorised use of a computer and mischief in relation to data.

"It is believed that Solis-Reyes was able to extract private information held by the CRA by exploiting the security vulnerability known as the Heartbleed Bug," the Royal Canadian Mounted Police (RCMP) said in a statement.

A search of the residence resulted in the seizure of computer equipment used to steal 900 Canadian taxpayers' data, which was made vulnerable by the "Heartbleed" bug.

Solis-Reyes is a computer science student at Western University, a spokesperson for the university said.

Website shut down

The Canada Revenue Agency was forced to shut down its publicly accessible website on Friday as the world learned about the Heartbleed computer bug, a previously undiscovered global internet security vulnerability.

The Canada Revenue Agency said 900 social insurance numbers - personal nine-digit codes required for working or accessing government benefits in Canada - had been stolen last week by "someone exploiting the Heartbleed vulnerability".

The recently-discovered flaw in online-data scrambling software OpenSSL allows hackers to eavesdrop on online communications, steal data, impersonate websites and unlock encrypted data.

OpenSSL is commonly used to protect passwords, credit card numbers and other data sent via the internet.

Cybersecurity firm Fox-It estimates that the vulnerability has existed for about two years, since the version of OpenSSL at issue was released.
Read more on:    cybercrime

Join the conversation! encourages commentary submitted via MyNews24. Contributions of 200 words or more will be considered for publication.

We reserve editorial discretion to decide what will be published.
Read our comments policy for guidelines on contributions.
NEXT ON NEWS24X publishes all comments posted on articles provided that they adhere to our Comments Policy. Should you wish to report a comment for editorial review, please do so by clicking the 'Report Comment' button to the right of each comment.

Comment on this story
Comments have been closed for this article.

Inside News24


Meet instagram star, Pumpkin the racoon

With 300 000 followers and growing Pumpkin is winning over the internet!



The cats that cost R35 000
Miley Cyrus can’t get enough of her new puppy
13 guilty pets
Meet SA's top poacher-catcher

Book flights

Compare, Book, Fly

Traffic Alerts

Plant some seeds. Your innovative mind is on fire and your ingenious ideas may just be the seeds for future projects. You may more

There are new stories on the homepage. Click here to see them.


Create Profile

Creating your profile will enable you to submit photos and stories to get published on News24.

Please provide a username for your profile page:

This username must be unique, cannot be edited and will be used in the URL to your profile page across the entire network.


Location Settings

News24 allows you to edit the display of certain components based on a location. If you wish to personalise the page based on your preferences, please select a location for each component and click "Submit" in order for the changes to take affect.

Facebook Sign-In

Hi News addict,

Join the News24 Community to be involved in breaking the news.

Log in with Facebook to comment and personalise news, weather and listings.