His Majesty the King

Compensation for Canadians whose personal or financial information was exposed in a 2020 data breach of Canada Revenue Agency and other government online accounts.

A class action settlement, Sweet v. His Majesty the King, has been approved for $8.7 million to compensate Canadians affected by a data breach of Government of Canada online accounts (including CRA My Account) between March 1 and December 31, 2020. The breach involved credential-stuffing attacks that exposed personal and financial information, and in some cases, led to fraudulent CERB claims. The claims portal is open through KPMG at breachsettlementcanada.kpmg.ca, with a deadline of February 3, 2027. Compensation tiers include up to $80 for account access issues, up to $200 for dealing with fraudulent use, and up to $5,000 for documented out-of-pocket losses, for a theoretical maximum of $5,280 per claimant.

You may be eligible if you:

• Class members are individuals whose personal or financial information in a Government of Canada online account was exposed to an unauthorized third party between March 1 and...
• Payment is reserved for those whose information was specifically accessed or misused during credential-stuffing attacks between June 26 and August 18, 2020.
• Individuals who received an email directly from KPMG regarding the breach are eligible.

• Basic contact information
• August 4, 2026 to February 3, 2027
• Proof of purchase or supporting documents

If you do not have every document, you may still be able to file. Many settlements accept claims without receipts.

• Visit breachsettlementcanada.kpmg.ca.
• Check your eligibility using your last name, the last three digits of your SIN, and your government account email.
• File a claim if you are eligible.
• Submit your claim by February 3, 2027.