During the COVID crisis, the Canadian government offered a program to assist Canadians that lost their jobs. It was intended to provide monies to allow them to pay rent/buy food/ etc. The program was called Canada Emergency Response Benefit (CERB). Seems that two separate cyber attacks compromised user credentials using "Credential Stuffing".
@dcontestiObviously they had not read SP800-207 Zero Trust security and had not even commenced that journey in terms of detecting and responding to such compromises. It appears their maturity level was at level 0.
