Canada Class Action Lawsuit: $8.7 million settlement offers eligible Canadians up to $5,000 – Check who qualifies and how to claim compensation

A Canadian court has approved an $8.7 million class action settlement related to the 2020 Government of Canada online account privacy breach, and eligible Canadians could receive up to $5,000 in compensation. The settlement covers people whose personal or financial information was accessed through compromised Government of Canada accounts, including CRA My Account, My Service Canada Account, and GCKey-linked services. Compensation depends on the type of claim, with documented out-of-pocket losses eligible for payments of up to $5,000. Eligible individuals should review the settlement criteria and submit a claim. Those who received a notice from the claims administrator, KPMG, may already qualify.

According to Narcity, the lawsuit alleges that inadequate security measures allowed unauthorized third parties to access confidential personal and financial information in online Government of Canada accounts during cyberattacks that took place between March 1, 2020, and December 31, 2020. The $8.7 million Government of Canada privacy breach class action settlement received court approval on May 5, 2026, clearing the way for compensation.

CANADA CLASS ACTION LAWSUIT COMPENSATION ELIGIBILITY

You may qualify for compensation if your personal or financial information in a Government of Canada online account was accessed without your permission between March 1 and December 31, 2020. To receive a payment, you must have been affected by the credential stuffing cyberattacks that occurred between June 15 and August 30, 2020, during which your information was accessed or used for fraudulent purposes.

Eligible claimants can seek up to $80 for time spent dealing with unauthorized access, up to $200 for time spent resolving fraud-related issues, and up to $5,000 to cover eligible unreimbursed losses, such as fraud or identity theft expenses under Special Compensation Fund Claim.

Final payments may vary based on the number of approved claims. Individuals who received a KPMG notification with a PIN can submit a claim, while others can verify their eligibility online using your last name, email address, and the last three digits of your Social Insurance Number (SIN).

HOW TO CLAIM CANADA CLASS ACTION LAWSUIT COMPENSATIONEligible Canadians can now submit claims under the Government of Canada privacy breach class action settlement, as the claims period officially opened on Tuesday (August 4). Claims must be filed by February 3, 2027, either through the online claims portal or by mail. Online submissions are expected to be processed more quickly than paper applications.

To file online, visit the settlement website, click ‘Apply for Compensation’, and sign in or create an account using your email address. You will need to provide personal information, including your name, phone number, email address, home address, and Social Insurance Number (SIN). If you received a notice from the claims administrator containing a PIN, you should enter it during the application process.

Applicants must estimate the amount of time they spent dealing with the effects of the cyberattack, such as contacting government agencies, law enforcement, or credit bureaus. This information is used to determine compensation for Access Claims and Fraud Claims.

Those seeking reimbursement for eligible out-of-pocket expenses, including fraud-related losses or identity theft costs, may also submit a Special Compensation Fund Claim. Unlike Access and Fraud Claims, these claims require supporting documents to verify the expenses.

If you are unable to apply online, you can download a paper claim form from the settlement website, complete it, and mail it to the claims administrator. Before submitting your claim, choose your preferred payment method – e-transfer, which offers the fastest payout, or a mailed cheque.