Many of us use online government portals to track our pensions, check tax returns, or manage our Canada Revenue Agency (CRA) accounts. Keeping our personal data secure is always a top priority, but a major security event from a few years ago has just taken a historic turn on the legal stage.
A finalized $8.7 million class-action settlement has officially opened up its claims window. If your personal information or government accounts were caught up in the severe cyberattacks that hit federal portals back in 2020, you may be legally entitled to a financial payout.
 |
| Canadians who were affected by the 2020 federal portal cyberattacks can securely check their eligibility and claim up to $5,000 through the official KPMG settlement portal. |
Scammers love to use real news to create fake identity-theft traps, so it is incredibly important to know exactly where to go to check your eligibility safely without risking your private data. Here is everything you need to know about who qualifies, how much you can receive, and how to file your official claim without spending a single loonie.
Table of Contents
- What is the CRA Data Breach Settlement?
- Who is Eligible to Receive Funds?
- Myth vs. Fact: The Social Insurance Number Safety Rule
- 3 Ways This Settlement Compensates You
- How to Securely Check Your Status Today
What is the CRA Data Breach Settlement?
Back in the summer and autumn of 2020, hackers launched a series of sophisticated "credential-stuffing" cyberattacks against the Government of Canada's digital infrastructure. The bad actors used stolen passwords from external corporate data leaks to successfully break into thousands of personal federal accounts.
Following years of legal proceedings, the Federal Court has officially approved an $8.7 million settlement fund to compensate affected Canadians. The court-appointed claims administrator, KPMG Canada, has opened the official online claims portal.
Who is Eligible to Receive Funds?
Not every Canadian with a standard tax profile automatically qualifies for a payout. To be eligible for a financial settlement, your online government profile must have been successfully breached during the 2020 cyberattacks. This includes unauthorized access to:
- CRA My Account
- My Service Canada Account
- Any federal portal accessed using a government GCKey username and password
The security breach must have taken place during one of the two specific court-defined timelines:
- The Main Cyberattack Window: Between June 26 and August 18, 2020.
- The "Represent a Client" Window: Between October 8 and November 25, 2020.
If you remember being completely locked out of your online tax account, receiving unexpected security notifications, or spotting unauthorized changes to your direct deposit banking details during those months, you are highly likely to be on the approved list.
Myth vs. Fact: The Identity Verification Rule
Because cybersecurity is top-of-mind for savvy seniors, it is normal to feel hesitant when an official website asks for personal details. Let's clear up what is safe versus what is a scam.
- Myth: A legitimate claims portal will never ask for any part of your Social Insurance Number (SIN).
- Fact: The official, court-approved eligibility tool does require you to enter the last three digits of your SIN alongside your last name and email address. This is a mandatory safety measure required by the courts to securely cross-reference your identity against the confidential list of confirmed victims provided by the government.
🚨 Savvy Senior Safety Warning: While the last three digits are safe on the official webpage, a real claims administrator will never ask you to text, email, or say your full 9-digit SIN over the phone. Always verify you are on the correct web address before typing.
3 Ways This Settlement Compensates You
If the official system confirms your account was compromised, your total cash cheque or payout will depend entirely on how the breach impacted your day-to-day life:
- Compensation for Lost Time (Up to $80): This fund compensates you for the stressful hours you spent sitting on hold with government phone lines, resetting security credentials, and speaking with agents to regain control of your locked profile.
- Compensation for Identity Fraud Care (Up to $200): If scammers used your leaked data to maliciously apply for emergency benefits (like fraudulent CERB applications) under your name, you can claim extra funds for the time spent correcting your official government records with federal organisations.
- Out-of-Pocket Financial Losses (Up to $5,000): For rare, severe cases where the breach directly led to unrecovered financial fraud or required you to pay out of pocket for specialized legal aid or advanced credit protection services, you can apply for heavy reimbursement.
How to Securely Check Your Status Today
To find out if your name is on the settlement roster, you can use the free, automated checker directly on the official claims site:
➡ Click Here to Access the Official KPMG Breach Settlement Portal
Simply input your last name, email, and the last three digits of your SIN. The system will instantly tell you if you are cleared to file a claim. If you are eligible, you can fill out and submit the paperwork directly online through their secure dashboard.
Keep a Close Eye on the Calendar: You have a strict window to claim your funds. The official submission portal will close completely on February 3, 2027.
I want to hear from you!
Do you remember your online CRA account being affected or locked out back in the summer of 2020? Have you already run your name through the settlement portal?
Leave a comment below and share your experience with our community!
About the Author
Su is a Canadian Senior, who created this dedicated space for helping retirees navigate discounts, rewards programs, and smart shopping strategies across Canada.
Connect with Su: Linktree/Sister_Su_Buys
1 comment:
Welcome to the discussion! I know so many seniors who spent hours on hold with the CRA back in 2020 trying to unlock their accounts. Did you experience any issues with your portal during those months? Let me know if you have tried the checker yet!
Post a Comment