The Office of the Privacy Commissioner of Canada revealed that there have been more than 42,000 breaches at the Canada Revenue Agency (CRA) since 2020, where unauthorized individuals accessed or modified taxpayer information. In a report presented to Parliament, Privacy Commissioner Philippe Dufresne criticized the CRA for its inadequate prevention and response strategies regarding data breaches. He noted that the agency's tracking systems were insufficient, preventing a complete account of confirmed breaches. Furthermore, the CRA did not implement mandatory multi-factor authentication in a timely manner, which is essential for enhancing account security. Dufresne made nine recommendations to improve the agency's practices, eight of which were fully accepted, while one was partially accepted. The report underscores the urgent need for enhanced protections to safeguard taxpayer information in Canada.