In August 2020, the Government of Canada took action in response to “credential stuffing” attacks mounted on the GCKey service and Canada Revenue Agency (CRA) accounts. A class-action lawsuit was ...