{"id":50747,"date":"2026-09-02T15:34:13","date_gmt":"2026-09-02T15:34:13","guid":{"rendered":"https:\/\/trustvistaconsulting.com\/news\/?p=50747"},"modified":"2026-09-02T15:34:15","modified_gmt":"2026-09-02T15:34:15","slug":"cra-account-hacked-you-could-claim-up-to-5000","status":"publish","type":"post","link":"https:\/\/trustvistaconsulting.com\/news\/cra-account-hacked-you-could-claim-up-to-5000\/","title":{"rendered":"Was Your CRA Account Hacked? You Could Claim Up to $5,000\u2014But the Clock Is Ticking"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><em>Thousands of Canadians affected by the 2020 government-account breach may qualify for compensation. Here\u2019s how to check your eligibility before the February 3, 2027 deadline.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If something suspicious happened to your CRA or Service Canada account during the pandemic, it may finally be worth money.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A court-approved settlement is now accepting claims from eligible Canadians whose personal information was accessed during the 2020 cyberattacks targeting CRA My Account, My Service Canada and other GCKey-linked accounts.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Depending on what happened and the costs you incurred, you could claim compensation ranging from $80 to as much as $5,000. But this isn\u2019t an automatic payment\u2014and not everyone whose account was affected will qualify.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why Canadians are being offered compensation<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In 2020, attackers used credentials stolen from other websites to attempt logins on Government of Canada portals. This technique, known as \u201ccredential stuffing,\u201d can work when someone reuses the same password across multiple services.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">After accessing certain accounts, attackers reportedly changed personal or banking information and submitted fraudulent applications for benefits such as CERB.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The incident eventually led to the class-action lawsuit <em>Sweet v. His Majesty the King<\/em>. The Federal Court approved the settlement in May 2026, although the Government of Canada continues to deny wrongdoing. <a href=\"https:\/\/www.canada.ca\/en\/government\/system\/digital-government\/online-security-privacy\/sweet-hmk-class-action-suit.html\" target=\"_blank\" rel=\"noopener\">Canada\u2019s official settlement notice<\/a> confirms that compensation claims are now open.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How much could you receive?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The amount depends on how the breach affected you:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Up to $80 for account-access problems:<\/strong> Eligible claimants may receive $20 per hour for as many as four hours spent contacting government departments, police or credit agencies.<\/li>\n\n\n\n<li><strong>Up to $200 for fraud-related problems:<\/strong> If stolen information was used for fraudulent benefit applications or diverted payments, compensation may cover as many as 10 hours at $20 per hour.<\/li>\n\n\n\n<li><strong>Up to $5,000 for documented expenses:<\/strong> This can include unreimbursed fraud losses, identity-theft-related professional fees and certain charges connected with credit freezes.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">These are maximum amounts\u2014not guaranteed payouts. Compensation may be reduced if the total value of approved claims exceeds the available settlement funds. <a href=\"https:\/\/www.breachsettlementcanada.kpmg.ca\/\" target=\"_blank\" rel=\"noopener\">The official administrator\u2019s notice<\/a> contains the complete compensation terms.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Who is actually eligible?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This is the part many headlines leave out: the settlement does not promise $5,000 to every Canadian with a CRA account.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">According to the claims administrator, payments are generally limited to identifiable individuals whose information was accessed during the credential-stuffing attacks. The covered services include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>CRA My Account<\/li>\n\n\n\n<li>My Service Canada Account<\/li>\n\n\n\n<li>Other Government of Canada accounts accessed through GCKey<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Receiving an official notice from KPMG is a strong indication that you can apply. If you did not receive one, you can still use the administrator\u2019s eligibility checker to find out whether your name appears among the affected accounts.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What you should do now<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">First, visit the <a href=\"https:\/\/www.breachsettlementcanada.kpmg.ca\/\" target=\"_blank\" rel=\"noopener\">official KPMG settlement portal<\/a> and complete its eligibility check.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you qualify, gather anything that could support your claim: CRA correspondence, bank statements, invoices, fraud reports, credit-monitoring receipts and records of the time you spent resolving the problem. Claims involving out-of-pocket losses will require stronger documentation than claims for time and inconvenience.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Submit the completed claim online or by mail no later than <strong>February 3, 2027<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Be careful with links sent through unsolicited emails or social-media posts. This settlement involves sensitive identity information, so confirm that you are on the official KPMG domain before entering anything. You should never have to pay a fee to unlock your compensation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is not free money for every taxpayer. But if your CRA, Service Canada or GCKey-linked account was compromised during the 2020 attacks, ignoring the settlement could mean leaving legitimate compensation unclaimed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A quick eligibility check could tell you whether you qualify for $80, $200 or reimbursement of documented losses worth as much as $5,000\u2014and the deadline is already approaching.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Thousands of Canadians affected by the 2020 government-account breach may qualify for compensation. Here\u2019s how to check your eligibility before the February 3, 2027 deadline. If something suspicious happened to your CRA or Service Canada account during the pandemic, it may finally be worth money. A court-approved settlement is now accepting claims from eligible Canadians &#8230; <a title=\"Was Your CRA Account Hacked? You Could Claim Up to $5,000\u2014But the Clock Is Ticking\" class=\"read-more\" href=\"https:\/\/trustvistaconsulting.com\/news\/cra-account-hacked-you-could-claim-up-to-5000\/\" aria-label=\"Read more about Was Your CRA Account Hacked? You Could Claim Up to $5,000\u2014But the Clock Is Ticking\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":50748,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-50747","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-canada"],"_links":{"self":[{"href":"https:\/\/trustvistaconsulting.com\/news\/wp-json\/wp\/v2\/posts\/50747","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/trustvistaconsulting.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/trustvistaconsulting.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/trustvistaconsulting.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/trustvistaconsulting.com\/news\/wp-json\/wp\/v2\/comments?post=50747"}],"version-history":[{"count":1,"href":"https:\/\/trustvistaconsulting.com\/news\/wp-json\/wp\/v2\/posts\/50747\/revisions"}],"predecessor-version":[{"id":50749,"href":"https:\/\/trustvistaconsulting.com\/news\/wp-json\/wp\/v2\/posts\/50747\/revisions\/50749"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/trustvistaconsulting.com\/news\/wp-json\/wp\/v2\/media\/50748"}],"wp:attachment":[{"href":"https:\/\/trustvistaconsulting.com\/news\/wp-json\/wp\/v2\/media?parent=50747"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/trustvistaconsulting.com\/news\/wp-json\/wp\/v2\/categories?post=50747"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/trustvistaconsulting.com\/news\/wp-json\/wp\/v2\/tags?post=50747"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}