You should promptly inform us if:

• You think that scammers contacted you posing as our employee to get confidential information about the business or its staff, clients or suppliers.
• You notice suspicious or abnormal activity when using our online services.

Examples of incidents to report

Some examples of incidents to report are as follows:

• You received a suspicious call or communication that doesn't fit with our communication practices with businesses.
• You noticed that an unauthorized person accessed the business's file in our online services.
• A change was made in the business's files without your consent.
• You have access to confidential information in our online services that doesn't belong to the business.

Contact us

If you think the business was the target of a cyberattack or fraud and confidential information was compromised, you must promptly report the incident to us so we can guide you and protect the victims' tax information.

Steps to follow to report a fraud

The steps to take in case of cyberattack or fraud are as follows:

1. If possible, make a list of all people whose confidential data was comprised that includes:
   • their name
   • their address
   • their Revenu Québec identification number or their Québec entreprise number (NEQ)
   • the nature of the compromised information
2. Contact us immediately to report the incident.
3. Inform the people whose data was compromised and tell them they can contact us so that we can put in place additional measures to protect the confidential information.
4. Report the incident to the Sûreté du Québec or local police.

Other steps 

After following the previous steps, we also recommend reporting the incident to the following organizations:

• the Canadian Anti-Fraud Centre
• the Commission d'accès à l'information
• any other supervisory body, such as the business's financial instituion or credit rating agency