These CRA user IDs and passwords may have been obtained through sources external to the CRA, such as email phishing schemes or third party data leaks. CRA user IDs and passwords identified as being at ...