Hackers used stolen passwords to breach CRA accounts: government