TENS OF THOUSANDS OF TAXPAYER ACCOUNTS HACKED AS CRA REPEATEDLY PAID OUT MILLIONS IN BOGUS REFUNDS

Summary from the TLDR InfoSec newsletter

The Canadian Revenue Agency (CRA) discovered that hackers had obtained confidential data belonging to H&R Block Canada. The attackers used the company's credentials to gain unauthorized access to Canadians' CRA accounts, change direct deposit info, submit false returns, and obtain more than $6M in funds. H&R Block Canada denies that the breach was its fault and states that it has no evidence that its systems were breached.