Heartbleed bug: The Canada Revenue Agency knew last Friday that hundreds of Canadians had their social insurance numbers stolen from its website because of the Heartbleed security bug but waited until Monday to make it public. "The Canada Revenue Agency contacted our office last Friday afternoon to notify us about the attack and of the measures it was taking to mitigate risks and notify affected individuals," said Valerie Lawton, a spokesperson for the Privacy Commissioner's Office in a written statement Monday afternoon. The commissioner's office later clarified that it was told by CRA that "several hundred Canadians" had their social insurance numbers stolen from the agency's website due to the Heartbleed security bug. more @ http://www.cbc.ca/news/business/heartbleed-bug-revenue-canada-knew-about-stolen-sins-last-friday-1.2609192