You Could Be Owed Up to $5,000: The CRA Data Breach Settlement, Explained
August 21, 2026 If you had a Government of Canada online account back in 2020, it's worth five minutes to check whether you're eligible for a payout. Claims are now open in an $8.7-million federal settlement tied to a wave of 2020 cyberattacks on Canada Revenue Agency and other Government of Canada accounts. If your CRA My Account, My Service Canada Account, or another GCKey-linked account was compromised, you may be entitled to compensation — in some cases, up to $5,000. Here's what happened, who qualifies, and exactly how to file before the deadline. What happened Between June and August 2020, hackers used "credential stuffing" — testing stolen usernames and passwords from other data leaks against government login pages — to break into thousands of Government of Canada online accounts. In some cases, attackers viewed confidential personal and financial information; in others, they used stolen access to file fraudulent claims for pandemic-era benefits like CERB...
