Canada CRA Data Breach Settlement Explained Simply

May 20, 2026 / 3 min readIshita Soni

What Is the CRA Settlement?

A new settlement in Canada is attracting major attention because some eligible Canadians may receive compensation after the 2020 government account data breach.

This settlement is linked to online accounts such as the Canada Revenue Agency (CRA), My Service Canada, and GCKey accounts.

Why Did This Data Breach Happen?

In 2020, hackers used a method called “credential stuffing” to access government accounts.

Basically, attackers used usernames and passwords stolen from other websites to try logging into Canadian government accounts. As a result, some people lost control of their personal or financial information.

Because of this incident, a class action lawsuit started against the Government of Canada.

Which Accounts Were Affected?

The breach may have affected:

  • CRA accounts
  • My Service Canada accounts
  • Other government accounts connected through GCKey

However, not every account holder became part of the breach.

Why Is This Settlement Trending Now?

Recently, the Federal Court approved the settlement agreement. Therefore, many Canadians are now checking whether they qualify for compensation.

Reports also say the federal government will pay around $8.7 million to settle the case.

Even so, Canadians should still verify official claim instructions before sharing personal information online.

Who Can Qualify for Compensation?

Not every Canadian can receive money from this settlement.

You may qualify if:

  • Your government online account was affected in 2020
  • Someone accessed your personal or financial information
  • Fraudulent activity happened using your information
  • You received a notice from the settlement administrator
  • You can provide proof for your claim

So, eligibility mainly depends on your situation and supporting evidence.

How Much Compensation Is Available?

The settlement includes different payment categories.

Compensation TypePossible AmountPurpose
Access ClaimsUp to $80For time spent fixing account access issues
Fraud ClaimsUp to $200For time spent handling fraud-related problems
Special Compensation FundUp to $5,000For financial losses connected to the breach

However, the $5,000 amount is not automatic.

Who Can Receive Up to $5,000?

The highest payment only applies to people who suffered actual financial losses because of the breach.

For example, eligible expenses may include:

  • Fraud losses that were not refunded
  • Identity theft recovery costs
  • Credit freeze fees
  • Professional service charges

Additionally, claimants may need documents that prove these expenses came from the breach.

Why Everyone Will NOT Get $5,000

This is the most important point to understand.

The settlement does not guarantee $5,000 for every Canadian. In fact:

  • Not every Canadian qualifies
  • Not every CRA user qualifies
  • Not every affected person will receive the maximum amount

Moreover, the final payment amount may decrease if many people submit claims.

Therefore, strong proof and proper records will play a major role.

What Documents May Help Your Claim?

Eligible claimants may need documents such as:

  • Bank statements
  • Credit card statements
  • Fraud or identity theft records
  • Police reports
  • Credit bureau letters
  • Proof of unreimbursed losses
  • Communication records with banks or government departments

These documents can help support the claim process.

Important Scam Warning

Since this settlement involves CRA-related accounts and compensation, scammers may try to target Canadians.

So, stay careful if someone:

  • Promises instant payment
  • Asks for banking passwords
  • Requests payment to release compensation
  • Sends suspicious links or messages
  • Claims every Canadian will receive $5,000

Remember, official settlement claims should never require payment fees.

What Should Canadians Do Now?

If you think the breach affected you, then take these steps carefully:

  • Check for official notices or emails
  • Verify settlement websites before sharing information
  • Collect documents related to losses or fraud
  • Follow official claim instructions only
  • Avoid fake links and scam messages

Most importantly, trust only official settlement administrators and government-approved sources.

Final Key Point

This settlement is real and relates to the 2020 Government of Canada account breach.

However, the “up to $5,000” amount is only the maximum possible reimbursement for eligible people with proven financial losses.

Therefore, Canadians should first confirm eligibility, protect their personal information, and carefully follow official claim instructions before applying.

Get in touch with SPS Global

Receive advice on any of your questions regarding immigration. Get in touch with us, experienced immigration consultants from SPS Global. For additional information, contact support@spscanada.com (Canada) or support.amd@spscanada.com (Ahmedabad), or by phone at (1) 905-362-9393 (Canada) or +919586226232 (Ahmedabad).