If your Canada Revenue Agency (CRA) account was compromised in 2020, you may qualify for compensation of up to $5,200. An $8.7 million settlement was officially approved on May 5, 2026. However, the claim submission portal is not yet open.
Important Dates and Claim Submission Process
The portal for submitting claims will open 60 days after the “Effective Date.” This is the deadline for appeals against the approval judgment, which, if expired without any appeal, will determine the date for opening the portal. While the exact date remains unconfirmed, it is anticipated that the portal will be active by summer 2026. Once it opens, you will have six months to submit your claim.
Eligibility for Compensation
You may be eligible for compensation if your CRA or Service Canada account was affected during the cyberattacks of summer 2020. Hackers utilized stolen passwords from other online sources to access government accounts and submitted fraudulent Canada Emergency Response Benefit (CERB) claims.
Compensation Breakdown
The compensation for eligible individuals includes:
- Unauthorized access victims: Up to $80 (max $20/hour for 4 hours) for time and inconvenience.
- Fraud victims: Up to $200 (max $20/hour for 10 hours) for time and effort related to the fraudulent use of information.
- Special compensation fund: Up to $5,000 for expenses directly tied to the incident, including credit monitoring fees and identity theft-related professional fees. Proof is required, such as receipts and bank statements, to verify that the expenses are related to the data breach.
How to Submit Your Claim
The claims process will be accessible through the portal at www.breachsettlementcanada.kpmg.ca or by phone at 1-833-724-6160 once it is live.
Stay tuned for updates regarding the exact opening date and further details on the claims process. This information will be shared as it becomes available to ensure that all eligible parties can successfully submit their claims.
