A 19-year-old Canadian man was arrested Tuesday for a Heartbleed attack on the Canada Revenue Agency website, during which the Social Insurance Numbers of about 900 taxpayers were removed from CRA systems.
Stephen Arthuro Solis-Reyes of London, Ontario, faces one count of unauthorized use of computer and one count of mischief in relation to data for his role in the CRA attack.
Over the course of six hours, the SINs of Canadian taxpayers were stolen from the system, CRA Commissioner Andrew Treusch announced Monday.
"The [Royal Canadian Mounted Police] treated this breach of security as a high priority case and mobilized the necessary resources to resolve the matter as quickly as possible," Assistant Commissioner Gilles Michaud said in a statement.
Computer equipment was seized from the teen’s home.
Those 900 taxpayers whose data were exposed will receive registered letters notifying them of the breach. Free credit protection services will be offered.
Solis-Reyes is scheduled to appear in an Ottawa court July 17.