Government of Canada

Class action settlement for a 2020 data breach affecting Government of Canada online accounts, including the CRA portal.

This class action settlement provides compensation for Canadians whose personal or financial information was compromised in a data breach of Government of Canada online accounts, including the Canada Revenue Agency (CRA) portal, between March 1, 2020, and December 31, 2020. Hackers primarily targeted these accounts in 2020 to apply for financial aid programs. Eligible class members who experienced unauthorized access between June 15 and August 13, 2020, and whose information was accessed or used fraudulently, can claim compensation. Those whose personal information was accessed but not used fraudulently may receive up to $80, while those whose information was accessed and used fraudulently may receive up to $200. Both groups can claim up to $5,000 for out-of-pocket costs related to identity theft. The claims process is administered by KPMG and is open until February 3, 2027.

You may be eligible if you:

• Individuals whose personal or financial information in a Government of Canada online account was disclosed to a third party without authorization between March 1, 2020, and...
• Specifically, those who were victims of unauthorized access between June 15 and August 13, 2020, and whose personal information was accessed or accessed and used for fraudulent...
• Individuals who received a notice from KPMG.
• Eligibility can be checked on the KPMG website.

• Basic contact information
• Claims opened August 6, 2026, and close February 3, 2027.
• Proof of purchase or supporting documents

If you do not have every document, you may still be able to file. Many settlements accept claims without receipts.

• Visit the KPMG website (breachsettlementcanada.kpmg.ca) to check your eligibility.
• Submit your claim online or by mail through the KPMG website.
• The claim deadline is February 3, 2027.