Albertans May Be Eligible to Claim Up to $5,280 Through the CRA Privacy Breach Settlement
The claims process for the $8.76 million Sweet v. His Majesty the King settlement opened on August 4, 2026, giving eligible Canadians an opportunity to seek compensation following unauthorized access to federal government online accounts in 2020.
The case is particularly relevant in Alberta, where 34.8% of workers received the Canada Emergency Response Benefit (CERB) in 2020, according to Statistics Canada.
During the same year, hackers used stolen usernames and passwords to gain access to some Government of Canada accounts and, in certain cases, submit fraudulent benefit claims.
Eligible class members have until February 3, 2027 to file a compensation claim.
Being Part of the Class Does Not Automatically Mean You Will Receive Compensation
The settlement class covers people whose personal or financial information contained in a Government of Canada online account was disclosed to an unauthorized third party between March 1 and December 31, 2020.
However, compensation is limited to two specific groups.
Group 1: Credential Stuffing Attack Victims
The first group includes people whose government accounts were accessed without authorization during credential stuffing attacks between June 26 and August 18, 2020.
Although some reports have cited a broader timeframe, the Federal Court-authorized settlement notice identifies June 26 through August 18 as the applicable breach period for this category.
Group 2: Represent a Client Account Victims
The second eligible group consists of people whose information was accessed by an unauthorized person through a Represent a Client account between October 8 and November 25, 2020.
Represent a Client is a CRA service commonly used by accountants, bookkeepers and tax professionals to access client tax information.
This means someone could potentially qualify even if their account was not directly affected by the summer credential stuffing attacks.
Government accounts covered by the settlement include CRA accounts, My Service Canada accounts and other federal services accessed through GCKey.
How Much Compensation Can Claimants Receive?
The settlement provides three main categories of compensation.
Access Claims: Up to $80
People whose information was accessed but not used fraudulently may claim compensation for time and inconvenience.
The payment rate is $20 per hour for up to four hours, providing a maximum payment of $80.
Fraud Claims: Up to $200
People whose personal information was accessed and then used fraudulently may qualify for a higher payment.
Examples include fraudulent applications for:
- CERB
- Canada Emergency Student Benefit, or CESB
- Employment Insurance
- Benefits redirected to unauthorized recipients
Compensation is calculated at $20 per hour for up to 10 hours, for a maximum of $200.
Special Compensation Fund: Up to $5,000
Claimants who experienced financial losses may seek reimbursement of eligible out-of-pocket expenses of up to $5,000.
Eligible costs can include unreimbursed fraud-related losses or charges, professional expenses connected with identity theft and certain fees or penalties associated with credit freezes.
The frequently reported $5,280 maximum combines the highest possible payment under all three categories. It should not be treated as a guaranteed payment, and individual compensation could be reduced depending on the number of approved claims.
How to Check If You Are Eligible
An online eligibility checker became available on January 15, 2026, before the compensation claims portal officially opened.
People who received an email or letter from KPMG containing a personal identification number may be eligible to submit a claim.
Those who were not contacted can still check their status. The eligibility process asks for information including:
- Last name
- Last three digits of the Social Insurance Number
- Email address associated with the government account during the relevant period
Anyone who has changed the email address connected to their CRA or federal account since 2020 should use the email address that was registered at the time of the breach.
How to File a Settlement Claim
Claims can be submitted through the official settlement website by selecting “Apply for Compensation” and registering with an email address.
Applicants generally need to provide their name, telephone number, mailing address and Social Insurance Number. A personal identification number should also be provided if one was issued.
People submitting access or fraud claims should calculate the amount of time they spent dealing with the incident, including conversations or correspondence with government departments, police or credit agencies.
The $20 hourly compensation rate is based on this time.
Supporting documentation is specifically required for claims made through the Special Compensation Fund. Standard access and fraud claims do not require the same supporting documentation.
Approved payments may be delivered by e-transfer or cheque, with electronic transfers generally providing the faster option. Online claims are also expected to process faster than mailed paper submissions.
People seeking reimbursement of larger expenses should begin collecting records such as receipts, bank statements, identity theft service invoices and credit bureau correspondence well before the deadline.
Fraudulent CERB Claims and CRA Tax Problems Are Separate Issues
Some Albertans spent considerable time in 2021 and 2022 resolving CERB-related issues with the CRA. In some situations, fraudulent CERB applications were submitted using stolen identities.
A settlement claim does not automatically resolve an outstanding tax or CRA account problem. Likewise, correcting a tax issue with the CRA does not automatically submit a settlement claim.
However, time spent communicating with the CRA, completing verification procedures, writing letters or attempting to resolve a fraudulent claim may be relevant when calculating compensation under the fraud claim category.
What the Sweet Class Action Alleged
Lead plaintiff Todd Sweet alleged that the Government of Canada failed to adequately protect confidential personal and financial information available through federal online services.
The lawsuit claimed insufficient safeguards allowed unauthorized individuals to enter government accounts, view confidential information and, in certain cases, apply for CERB using other people’s identities.
The Federal Court certified the class action on August 25, 2022 and approved the settlement on May 5, 2026.
Under the agreement, the federal government agreed to pay $8,760,500.90.
The Government of Canada denies the allegations and has not admitted liability, fault or wrongdoing. The settlement represents a negotiated resolution of disputed claims.
Legal Fees and Remaining Settlement Funds
Class counsel is Rice Parsons Leoni & Elliott LLP, formerly known as Rice Harbut Elliott LLP.
The court approved legal fees equal to 33.33% of net settlement proceeds, along with applicable disbursements, taxes and administration costs.
Honoraria were also approved for the representative plaintiffs, including:
- $5,000 for Todd Sweet
- $1,500 for Anne Campeau
- $1,500 for Tanis Seminoff
Any remaining settlement money will not be returned to the federal government. Unclaimed funds have been designated for privacy-related research through the Privacy and Access Council of Canada.
Opt-Out Deadline Has Already Passed
The deadline to opt out of the class action was February 20, 2026.
People who did not opt out are bound by the settlement and generally cannot pursue a separate lawsuit against the federal government over the same breach, regardless of whether they ultimately submit a compensation claim.
CRA Data Breach Settlement Claim Deadline
The final deadline for submitting a claim is February 3, 2027.
Eligible Canadians should verify their status, collect any required supporting records and submit their application before the deadline, particularly if they are requesting reimbursement through the Special Compensation Fund.
The $8.76 million federal data breach settlement provides compensation to eligible Canadians whose government accounts were accessed during specific security incidents in 2020.
Payments range from relatively small compensation for inconvenience to as much as $5,000 for documented financial losses.
Because eligibility is narrower than overall class membership, affected individuals should verify which category applies and file before February 3, 2027.
