\n
![\"cra\"](\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2026\/05\/Upped-my-Canadian-patriotism-by-about-5000000-2025-12-11T160342.621.jpg\"\/ "\\"\\"")
<\/p>\nCanadians who have Government of Canada online accounts, including the Canada Revenue Agency (CRA) \u201cMy Account,\u201d could be eligible to cash in on an approved class-action settlement.<\/p>\n
The settlement for the nationwide class action involving the alleged privacy breach of Government of Canada online accounts was approved by the Federal Court on Tuesday, May 5, 2026.<\/p>\n
In the decision, Federal Court Justice Richard Southcott wrote that the terms of the settlement are \u201cfair, reasonable, and in the best interests of the class as a whole.\u201d<\/p>\n
This means the federal government will need to pay $8.7 million to settle the class action involving tens of thousands of impacted Canadians.<\/p>\n
What is the class action about?
\n<\/p>\n
Wandering views\/Shutterstock<\/p>\n
In August 2020, the Canadian government responded to \u201ccredential stuffing\u201d attacks<\/a> mounted on the GCKey service and CRA accounts.<\/p>\n After the cyberattack, Todd Sweet initiated a class action<\/a> against the CRA and the Government of Canada, alleging that they were \u201cnegligent in safeguarding the confidential information of Canadians, leading to widespread privacy breaches.\u201d<\/p>\n In the\u00a0class-action lawsuit<\/a>, Sweet claimed that \u201cinadequate safeguards\u201d within several online government portals \u201callowed bad actors\u201d to access the online accounts of Canadians without their consent. Hackers had access to personal and financial information, including social insurance numbers, addresses, and banking details.<\/p>\n He also alleged that, in many cases, these bad actors used real accounts to apply<\/a> for the Canada Emergency Response Benefit (CERB).<\/p>\n Sweet asked the court to order the Government of Canada to pay compensation for the alleged breach of privacy and credit monitoring services that may be needed to repair the harm caused.<\/p>\n In December 2025, both parties reached an agreement on a proposed settlement<\/a>.<\/p>\n \u201cThe Government of Canada, like every other government and private sector organization in the world, faces ongoing and persistent cyber threats,\u201d the Treasury Board of Canada Secretariat shared in a statement at the time.<\/p>\n They added that the government provided information regarding the class action and that government departments also sent out direct notifications to individuals who may have been impacted by the cyberattack.<\/p>\n Who\u2019s eligible for the CRA settlement?<\/p>\n KPMG, which is administering the settlement, shared details for eligibility on a dedicated website.<\/p>\n \u201cYou are a Class Member if your personal or financial information in a Government of Canada Online Account was disclosed to a third party without authorization between March 1, 2020, and Dec. 31, 2020, including those defined as \u2018Excluded Persons,’\u201d reads the site.<\/p>\n Government of Canada online accounts include a CRA account, My Service Canada account, and any other Government of Canada online account accessed using GCKey.<\/p>\n \u201cExcluded Persons\u201d means all persons who contacted Murphy Battista LLP about the CRA privacy breach class action, with Federal Court file number T-982-20, prior to June 24, 2021.<\/p>\n KPMG noted that not all class members will be entitled to payments under the settlement agreement.<\/p>\n According to a federal government<\/a> notice, only those class members who were victims of the \u201ccredential stuffing\u201d attacks directed at Government of Canada Online Accounts between June 15 and Aug. 30, 2020, are eligible for a possible payout. Their personal information needs to have been accessed, or accessed and used for fraudulent purposes, to be entitled to payments.<\/p>\n The notice added that those who received an email from claims administrator KPMG are eligible to apply for a payment under the settlement agreement.<\/p>\n How much money could you get? Vergani Fotografia\/Shutterstock<\/p>\n KPMG has yet to update its site with details about how the payments will be distributed or when the claim deadline is.<\/p>\n Depending on how you were impacted, here\u2019s how much you could claim:<\/p>\n Access claims<\/p>\n If your personal information was accessed (but not used for fraudulent purposes), you could submit an access claim.<\/p>\n This would compensate you for the loss of time and inconvenience incurred (if any) communicating with government officials, law enforcement or credit agencies addressing issues related to the data breach, at a rate of $20 per hour for a maximum of four hours. That means you could claim up to $80.<\/p>\n Fraud claims<\/p>\n If your personal information was accessed and used for fraudulent purposes, you could claim for fraud.<\/p>\n Examples include fraudulent applications made in your name for CERB benefits, CESB benefits and\/or EI benefits, or if payments for legitimate CERB, CESB, or EI claims were diverted to an unauthorized bank account.<\/p>\n If this fits your situation, you could be eligible to receive compensation for the loss of time and inconvenience incurred communicating with government officials, law enforcement officials, or credit agencies addressing issues related to the data breach, at a rate of $20 per hour for a maximum of 10 hours. That means you could claim up to $200.<\/p>\n Special compensation fund<\/p>\n If you\u2019ve incurred out-of-pocket expenses relating to the data breach, you\u2019re eligible to apply for reimbursement of up to $5,000.<\/p>\n \u201cEligible out-of-pocket expenses include unreimbursed fraud losses or charges, professional or other fees incurred in connection with identity theft, and fees or penalties resulting from credit freezes,\u201d explained the government notice.<\/p>\n It added that the precise amount of compensation could be reduced depending on the number of claims made.<\/p>\n What should you do next?<\/p>\n Class members who want to participate in the settlement didn\u2019t have to do anything.<\/p>\n \u201cYou are automatically included as a class member unless you opt out of the applicable proceeding,\u201d reads the government\u2019s notice. \u201cAfter the court approves the proposed settlement, you will be notified in writing regarding how to apply for compensation.\u201d<\/p>\n To learn more, read the government notice<\/a> and visit the settlement site<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"Canadians who have Government of Canada online accounts, including the Canada Revenue Agency (CRA) \u201cMy Account,\u201d could be…\n","protected":false},"author":2,"featured_media":654537,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[45,49,48],"class_list":["post-654536","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-business","tag-ca","tag-canada"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/654536","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/comments?post=654536"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/654536\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media\/654537"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media?parent=654536"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/categories?post=654536"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/tags?post=654536"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n![\"CRA\"](\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2026\/05\/Upped-my-Canadian-patriotism-by-about-5000000-2026-02-25T103326.412.jpg\"\/ "\\"\\"")
<\/p>\n