Hackers had obtained H&R Block e-filing credentials provided by the CRA — in essence the confidential electronic keys used by the firm's accountants to file returns on behalf of taxpayers.

It eventually became clear that the stolen H&R block information helped imposters gain access to Canadians' tax returns, change banking information and even their addresses in order to claim bogus refunds and tax credits.

Of course...