Could You Be Owed Up to $5,200? The CRA My Account Breach Settlement Explained
If you use the CRA My Account or My Service Canada Account, you might be eligible for a significant payout. A federal court has officially approved an $8.7 million settlement to compensate Canadians whose personal and financial data were exposed during a series of sophisticated cyberattacks.
But what exactly happened, and more importantly, how do you get your money? Here is everything you need to know about the CRA my account breach settlement.
What Happened During the Breach?
Back in 2020, several Government of Canada platforms were targeted by a wave of cyberattacks. These breaches compromised the sensitive information of over 47,000 Canadians. In many instances, hackers used stolen credentials to file fraudulent CERB (Canada Emergency Response Benefit) applications in the names of unsuspecting victims.
Following a rigorous class action lawsuit, the court has now paved the way for those affected to be compensated for the stress, identity theft risks, and financial losses incurred.
Are You Eligible for Compensation?
You may be eligible for a payment (which could reach up to $5,200 depending on the category of loss) if:
- n
- Your CRA My Account or My Service Canada Account was compromised between June 15 and August 30, 2020.
- You received a notification email from KPMG regarding the settlement.
n
n
Not sure if you’re on the list? You can verify your eligibility directly through the official channel. You will need your last name, the last three digits of your Social Insurance Number (SIN), and your email address to check.
How and When to File Your Claim
The claims portal is expected to go live this summer. According to the judgment, the filing period officially opens 60 days after the appeal deadline passes without a challenge.
Key details for the claim process:
- n
- Where to file: Visit breachsettlementcanada.kpmg.ca.
- Alternative method: You can also file by phone at 1-833-724-6160.
- Deadline: Once the portal opens, you will have a six-month window to submit your application. Do not miss this deadline!
n
n
n
Understanding the Compensation Categories
The settlement is divided into three categories based on the impact of the breach. While some payments are streamlined, the highest tier of compensation requires supporting documentation. To claim the maximum amount, be prepared to provide:
- n
- Bank statements showing fraudulent activity.
- Receipts for identity theft protection services.
- Invoices or legal fees directly linked to the breach.
n
n
n
Stay Protected Against Future Breaches
While this settlement provides financial relief, it’s a reminder of the importance of digital security. To protect your government accounts, the Canadian Centre for Cyber Security recommends using strong, unique passwords and enabling multi-factor authentication (MFA) whenever possible.
