This article is from the source 'bbc' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.

You can find the current article at its original source at http://www.bbc.co.uk/news/technology-27028101

The article has changed 5 times. There is an RSS feed of changes available.

Version 0 Version 1
Heartbleed hackers steal Canada Revenue Agency data Heartbleed hacks hit Mumsnet and Canada's tax agency
(35 minutes later)
Canada's tax collector has said that hackers exploiting the Heartbleed bug have stolen data about hundreds of citizens from its computers. A leading UK site for parents and the Canadian tax authority have both announced they have had data stolen by hackers exploiting the Heartbleed bug.
The Canada Revenue Agency said that the haul involved social insurance numbers as well as other as yet unidentified information. Mumsnet - which says it has 10 million visits per month - said that it believed that the cyber thieves may have obtained passwords and personal messages before it patched its site.
The attack is the first confirmed exploit of the cryptography flaw to result in the loss of sensitive data. The Canada Revenue Agency said that 900 people's social insurance numbers had been stolen.
The agency said it would send registered letters to those affected. These are the first confirmed losses.
"Based on our analysis to date, Social Insurance Numbers (SIN) of approximately 900 taxpayers were removed from CRA systems by someone exploiting the Heartbleed vulnerability," the agency said on a message posted to its homepage. "On Friday 11 April, it became apparent that what is widely known as the Heartbleed bug had been used to access data from Mumsnet users' accounts," the London-based website said in an email to its members.
"We are currently going through the painstaking process of analysing other fragments of data, some that may relate to businesses, that were also removed." "We have no way of knowing which Mumsnetters were affected by this.
"The worst case scenario is that the data of every Mumsnet user account was accessed.
"It is possible that this information could then have been used to log in as you and give access to your posting history, your personal messages and your personal profile, although we should say that we have seen no evidence of anyone's account being used for anything other than to flag up the security breach, thus far."
The site added that it was forcing its members to reset any password created on or before Saturday.