A young man already charged with hacking into Canada Revenue Agency computers will find himself in even more trouble with the law when he returns to court later this month.
Stephen Solis-Reyes, 19, of London, Ont., was arrested in April and charged with mischief to data and unauthorized use of a computer system after he allegedly exploited a computer vulnerability to siphon off the personal information of hundreds of taxpayers.
The attack, which exploited the so-called Heartbleed software bug, paralyzed the CRA, forcing it to shut down the electronic tax-filing site and extend the filing deadline.
The tax agency said it has since fixed the problem.
Police allege Solis-Reyes “exfiltrated” data by transferring senstitive information from the CRA’s network to “another location” without authorization.
Police said their investigation uncovered additional victims of hacking, some from Canada, including Western University, and others from abroad.
The new charges include two additional counts of mischief to data; three counts of possessing an instrument or device designed for unauthorized use of a computer; and five counts of posessing a password that would enable unauthorized use of a computer.
Also named in the charges is Jersey Mail, the former e-mail service on the Island of Jersey in the Channel Islands off the coast of England.