Here’s the latest on the CRA data breach settlement.
-
Summary: Canada’s federal government has agreed to an $8.7 million settlement related to the 2020 CRA data breach affecting tens of thousands of accounts. This settles a class-action lawsuit and compensation is being distributed to affected individuals, with eligible claimants potentially receiving amounts for inconvenience and other losses.[1][3][4]
-
What it covers: The settlement fund is intended to cover payments to affected Canadians, along with legal fees and related costs. Specific payment amounts have been described as up to around $80 for some claims, with other provisions and potential supplemental payments as part of the settlement terms.[3][5][1]
-
How to participate: If you believe you were affected, you will likely need to file a claim through the administrator's portal or process established in the settlement, and verify eligibility through the official channels referenced in the court-approved agreement. The administrator and claim process are being managed by the court-appointed administrator under the settlement framework.[6][7][1]
Illustration: Affected Canadians typically review settlement notices from the government and the administrator, then submit a claim that documents the breach’s impact and supports the requested compensation.[1][3]
Notes and context:
- The breach occurred in 2020 and involved credential stuffing and other unauthorized access to CRA accounts during the pandemic, which led to the class action and settlement discussions.[1]
- There are related CRA data-breach settlements referenced in 2022 and other years, but the current prominent update is the 2026 $8.7 million agreement.[2]
If you’d like, I can pull the official claim deadlines, exact eligibility criteria, and the administrator’s portal link from the settlement documents and summarize them in a checklist tailored to you.[7][1]
Sources
Ottawa is bracing for a multi-million-dollar bill after reaching a settlement in a class action lawsuit tied to the 2020 hacking of tens of thousands of federal taxpayer accounts, the Treasury Board confirmed.
www.westernstandard.newsCanada will pay $8.7 million in the cra class action lawsuit over a 2020 breach that hit CRA accounts. The settlement covers more than 48,000 Canadians whose personal and financial information was compromised, including social insurance numbers, home addresses and bank details. The court approved th…
www.el-balad.comThe 2025 CRA data breach class action settlement allows eligible Canadians to claim compensation for financial losses, identity theft, and emotional distress.
breachspot.comGovernment of Canada Privacy Breach Class Action – Proposed Settlement
www.breachsettlementcanada.kpmg.caSome of the $8.7 million settlement fund will also cover legal fees and special honorariums to Todd Sweet and other key plaintiffs. In his decision, Federal Court Justice Richard Southcott wrote that the terms of the settlement are “fair, reasonable, and in the best interests of the class as a whole.”
unpublished.caCanadians who have Government of Canada online accounts, including a CRA account, could be eligible to cash in on an approved settlement.
dailyhive.comBreaking update on the 2026 CRA Privacy Breach Class Action settlement. Verify your eligibility, check the March 31 approval hearing details, and calculate your max payout.
cksaksens.comOn November 7, a coalition of 40 state attorneys general, co-led by Massachusetts and Illinois, reached settlements with a credit reporting agency (CR...
infobytes.orrick.comMark Us Preferred on GoogleWilliam HetheringtonUpdated: 0:00 The federal government has agreed to pay $8.7 million to settle a class-action lawsuit launched after tens of thousands of Canada Revenue Agency accounts were compromised in a 2020 cyberattack. The settlement stems from a data breach during the COVID-19 pandemic, when many Canadians were using CRA online accounts to access emergency benefits and tax services. Cybercriminals used stolen usernames and passwords from unrelated data...
www.theepochtimes.com