CRA Data Breach Settlement 🇨🇦 — How to Claim Up to $5,000
Chapters
00:00 - Introduction to the CRA Data Breach
00:20 - What happened in the Summer of 2020?
01:44 - How the Breach Occurred: Credential Stuffing Explained
02:58 - The Impact on Canadians: A Real-Life Example
04:24 - Details of the $8.7 Million Settlement
04:58 - Who is Eligible for Compensation?
05:46 - Claim Categories: How Much Can You Receive?
06:44 - Out-of-Pocket Expenses & Identity Theft Claims
07:38 - Step-by-Step Guide: How to File Your Claim
09:01 - What to do if You Weren't Notified
09:15 - Final Summary & Important Deadlines
Did you know that If your CRA account was hacked in 2020, you could be owed up to $5,000 — but you have to claim it before February 3, 2027.
Why does this matter?
"Here is the law.
Your CRA account was hacked in 2020. Hackers stole your SIN, address, and bank details.
The government just agreed to pay $8.7 million to settle a class‑action lawsuit.
You could be eligible for up to $5,000.
The Breakdown
The class‑action lawsuit stemmed from credential stuffing attacks on CRA My Account, My Service Canada, and other government portals between June and August 2020 .
Over 48,000 Canadians had their personal and financial information compromised .
Hackers used the stolen information to apply for CERB, CESB, and EI benefits in victims' names
Here is the payout breakdown:
Access claims: Up to $80 — if your information was accessed, but not used fraudulently
Fraud claims: Up to $200 — if your information was used to file fraudulent benefit applications
Out‑of‑pocket expenses: Up to $5,000 — for fraud‑related costs within one year of the breach, like credit card charges and identity theft fees
The claim deadline is February 3, 2027 .
The Action
Here is your move.
Check your eligibility. Visit the KPMG settlement website — the administrator of the lawsuit — and enter your last name and the last three digits of your SIN .
If you received an email from KPMG, you are eligible to apply .
Submit your claim online or by mail before February 3, 2027 .
Now you know
#CanadaRevenueAgencyRefund #DataBreach #KnowyourRights #HereIsTheLaw #ichatLaw
Links
My website
ichatlaw.com
Facebook
facebook.com/ichatlaw
Twitter
twitter.com/Chatlaw
Instagram
instagram.com/ichatlaw
Disclaimer
The information provided in this podcast is for general informational and educational purposes only and does not constitute legal advice. While we strive to provide accurate and up‑to‑date information, laws and regulations change frequently, and the application of law to specific facts can vary significantly.
No solicitor‑client relationship is formed by listening to this podcast. You should not act or refrain from acting based on any information provided without first seeking independent legal advice from a qualified legal professional licensed to practice in your jurisdiction.
iChatLaw and its hosts, contributors, and affiliates expressly disclaim any and all liability in respect of any actions taken or not taken based on any or all of the contents of this podcast.
© 2026 iChatLaw. All rights reserved.