- Claim up to $80 ($20/hour for up to 4 hours) for time spent dealing with unauthorized account access.
- Claim up to $200 ($20/hour for up to 10 hours) for resolving fraudulent CERB, CESB, or EI applications.
- Claim up to $5,000 from the Special Compensation Fund for documented out-of-pocket financial losses resulting from identity theft and credit freezes.
| 🎯 2026 CRA Data Breach Class Action Quick Snapshot | |
|---|---|
| ✅ Eligibility Target | Taxpayers whose CRA or GCKey portals were breached in 2020 |
| 💰 Maximum Benefit/Value | Up to $80 (Access) + $200 (Fraud) + up to $5,000 (Out-of-Pocket Losses) |
| ⏳ Official Status | Federal Court Approved (May 5, 2026 – 2026 FC 590) |
💡 ManiInfo Expert Tip: While most guides focus only on basic unauthorized access claims, our analysis shows that accurately categorizing your time spent resolving fraudulent benefit applications ($20/hour up to $200) alongside documented out-of-pocket expenses (up to $5,000) is the real key to maximizing your financial recovery.
- 🏛️ 2026 CRA Data Breach Settlement: Compensation Tiers Explained
- 📋 Who is Eligible for the 2026 CRA Settlement? (Requirements)
- 💸 Financial Impact: Costs, Pricing, and Maximum Payout Limits
- 🚨 Top Reasons for Settlement Rejection & How to Defend
- 🧮 2026 CRA Settlement Payout Simulator
- 📝 CRA Settlement Key Takeaways & Quick Summary
- ❓ Frequently Asked Questions About the 2026 CRA Settlement
🏛️ 2026 CRA Data Breach Settlement: Compensation Tiers Explained
Understanding the multi-tiered structure of the 2026 CRA Data Breach Class Action Settlement is essential before filing any documentation. The Federal Court has authorized a three-category approach to ensure fair distribution of the $8.7 million fund based on the severity of impact.
As of May 26, 2026, ManiInfo’s compliance team has verified this compensation framework against the official Federal Court judgment (Sweet v. His Majesty the King, 2026 FC 590). Proper tier selection is critical when comparing comprehensive identity theft liability coverage solutions for the future.
Tier 1: Access Claims (Unauthorized Account Access)
This foundational category is designed for class members whose personal information was accessed during the 2020 credential-stuffing attacks on government portals, but not used for fraudulent purposes. It requires no supporting documentation beyond verifying your eligibility against government breach records.
- Hourly Rate & Cap: Compensates for inconvenience or time spent communicating with government officials, law enforcement, or credit agencies at $20 per hour for up to 4 hours (maximum $80 CAD).
- Verification: Eligibility is checked using your last name, email address on file in 2020, and part of your SIN.
- Requirement: Your CRA My Account or GCKey account must have been compromised during the targeted 2020 breach window.
Many claimants unfortunately stop here. Review subsequent tiers to ensure you are not leaving legitimate fraud or out-of-pocket compensation unclaimed.
Tier 2: Fraud Claims (Identity Theft & Benefit Fraud)
The 2020 cyberattacks frequently aimed to fraudulently apply for the Canada Emergency Response Benefit (CERB), the Canada Emergency Student Benefit (CESB), or Employment Insurance (EI), or to divert legitimate payments to unauthorized bank accounts. Reversing these unauthorized actions required victims to spend hours dealing with government bureaucracies.
- Hourly Restitution: Claimants whose personal information was used for fraudulent purposes can claim $20 per hour for time spent addressing the issue with the CRA, Service Canada, law enforcement, or credit bureaus.
- Maximum Limit: Compensation in this category is capped at a maximum of 10 hours, equaling up to $200 CAD.
- Combined Eligibility: Claimants can apply to more than one category if they experienced both unauthorized access and subsequent fraud or out-of-pocket expenses.
If you spent hours trying to unlock your account and prove you did not receive a diverted CERB, CESB, or EI payment, this tier directly acknowledges that burden.
Tier 3: Special Compensation Fund (Out-of-Pocket Losses)
This tier addresses the most severe consequences of the breach: actual monetary losses or verifiable expenses incurred to restore a compromised identity or credit profile. Supporting documentation is strictly required.
- Maximum Reimbursement: Claimants can recover up to $5,000 CAD for documented out-of-pocket expenses (for a combined maximum payout of up to $5,280 across all categories).
- Eligible Costs: Unreimbursed fraud losses or charges, professional or legal/accounting fees incurred due to identity theft, and fees or penalties resulting from credit freezes.
- Burden of Proof: You must supply receipts, invoices, and clear documentation linking the expense directly to the 2020 government data breach.
Claimants often use these funds to offset the costs of hiring professionals for the CRA Taxpayer Relief & Adjustment Program if the breach resulted in erroneous tax assessments.
📊 2026 Tier 2 Fraud Time Simulation
Profile: A freelance graphic designer in British Columbia whose CRA account was hacked in August 2020 to apply for a fraudulent CERB payment under their SIN.
The Action Plan: Instead of only claiming the Tier 1 access amount ($80 max), the designer logs the hours spent resolving the fraudulent benefit application under Tier 2.
- Action 1 (CRA & Service Canada Calls): 6 hours on hold and speaking with agents to report the CERB fraud and restore account access.
- Action 2 (Credit Agencies): 2 hours contacting Equifax and TransUnion to place fraud alerts on their credit profile.
- Action 3 (Police Report): 2 hours filing an official identity fraud report with local law enforcement.
Total ROI: By claiming the full 10 hours of eligible fraud-resolution time at the court-approved rate of $20/hour, the designer qualifies for the maximum $200 CAD Tier 2 Fraud Claim payout (plus any eligible Tier 1 or Tier 3 amounts).
*Note: The above case study is a strategic model applying the approved 2026 FC 590 settlement guidelines. Actual payouts may be adjusted pro rata depending on the total number of approved claims submitted.
📋 Who is Eligible for the 2026 CRA Settlement? (Requirements)
The Federal Court approval solidifies the criteria for class inclusion. Filing a claim under the 2026 CRA Data Breach Class Action Settlement requires passing strict eligibility gateways. Having confirmed the compensation tiers, let us examine exactly who qualifies for this restitution.
The 2020 Breach Window
The settlement specifically covers the wave of credential-stuffing attacks and privacy incidents that occurred between June and August 2020. If your CRA My Account or GCKey-linked federal portal was accessed by unauthorized third parties during this timeframe, you fall within the class definition. Breaches from unrelated years are not covered under this $8.7M fund.
Portal Eligibility Check
Class members can verify their inclusion directly through the court-appointed administrator (KPMG) portal using their last name, the email address linked to their government account in 2020, and a partial Social Insurance Number (SIN).
Identity Theft Victims
Individuals who discovered fraudulent CERB, CESB, or EI applications filed under their SIN—or had legitimate payments diverted—are prime candidates for Tier 2 ($200 max) and Tier 3 ($5,000 max) compensation.
Opt-Out Exclusions
If you formally requested to opt out of the class proceeding prior to the February 20, 2026 opt-out deadline (to pursue an individual lawsuit against the Crown), you are legally barred from claiming any portion of this approved settlement fund.
🔮 Underutilized Benefits & Expert Strategies
Navigating a government class action requires precision. Our analysis highlights several strategic approaches that claimants frequently miss when rushing their submissions.
👇 Click the floating icons below to reveal hidden strategies…
No-Proof Tier 1 & 2
For standard Access ($80 max) and Fraud ($200 max) time claims, eligibility is matched against official government breach records without requiring complex legal affidavits, streamlining online submission.
Credit Freeze Receipts
Before submitting a Tier 3 Special Compensation claim (up to $5,000), gather all invoices for credit freezes, professional accounting fees, and unreimbursed fraud charges incurred after the 2020 breach.
Tax Relief Leverage
If fraudulent CERB or CESB claims artificially inflated your 2020 taxable income, ensure your CRA T1 Adjustment and Notice of Reassessment records are saved to support any related administrative inquiries.
🛑 Common Myths vs ✅ Official Facts
❌ Myth: “The government already fixed my tax return, so I don’t qualify for the settlement money.”
✅ Fact: The settlement compensates you for the unauthorized access to your data and the time/inconvenience spent resolving the issue ($20/hour), regardless of whether the CRA eventually corrected your tax balance.
❌ Myth: “Claiming the settlement will trigger a full audit of my small business.”
✅ Fact: The claims process is managed by an independent court-appointed administrator (KPMG), not the CRA’s audit division. Participating in a court-approved class action has zero impact on your tax compliance risk score. As of May 26, 2026, ManiInfo’s compliance team has verified this strict separation.
💸 Financial Impact: Costs, Pricing, and Maximum Payout Limits
Evaluating the financial impact of the 2026 CRA Data Breach Class Action Settlement is crucial. Should you invest the time to gather documents for the Special Compensation Fund? Compare the high-risk costs of ignoring the settlement against the potential ROI of a properly filed claim.
The Cost of Apathy
Failing to claim your rightful restitution.
❌ Forfeited Cash
If you ignore the claims window, you forfeit up to $80 for unauthorized access, up to $200 for fraud resolution time, and up to $5,000 in out-of-pocket reimbursement. Your unclaimed share simply remains in the settlement pool.
Maximizing Tier 3
The ROI of diligent record-keeping.
💰 Up to $5,000 Recovery
Taking a weekend to track down 2020 credit freeze receipts, professional invoices, and unreimbursed fraud statements can unlock up to $5,000 from the Special Compensation Fund.
Predatory Fee Traps
Avoid unauthorized “recovery” agents.
🛑 30% Deductions
Beware of private firms aggressively advertising to “handle your CRA claim” for a 30% cut. The official court-appointed claims portal is entirely free and takes only a few minutes. Never surrender a percentage of your settlement to intermediaries.
Funding Future Security
Reinvesting your settlement payout.
📈 Smart Allocation
Financially astute claimants use their payouts to fund private credit monitoring and identity theft protection tools, turning a past government data breach into proactive personal cybersecurity.
🚨 Top Reasons for Settlement Rejection & How to Defend
The $8.7 million fund is finite, and the administrator will rigorously scrutinize submissions to prevent fraud. Below are the top reasons claims for the 2026 CRA Data Breach Class Action Settlement will face instant denial, and your strategy to defend against them.
⚠️ Critical Rejection Triggers
- Missing the Absolute Deadline: Submitting a claim after the court-mandated claims period closes. Defense: Establish calendar alerts now and file early once the portal is open, as courts rarely grant extensions for late individual filings.
- Insufficient Evidence for Tier 3 ($5,000 Cap): Claiming thousands of dollars from the Special Compensation Fund without receipts. Defense: Tier 3 is strictly for documented out-of-pocket financial losses (such as professional fees, credit freeze costs, or unreimbursed fraud charges). You must upload concrete proof.
- Using Updated Instead of 2020 Account Details: Entering a newer email address or replacement SIN during the initial eligibility check. Defense: Use the exact last name, email address, and SIN digits that were on file with your government account during the 2020 breach period.
After verifying your eligibility and securing your documents, the next logical step is calculating your specific payout amount below.
💡 Plan B Alternative: If you are deemed ineligible because your account was compromised outside the specific 2020 breach window, your immediate next step should be to compare private Comprehensive Identity Theft Liability Coverage quotes to independently secure your financial future.
🔄 Pre-Approval Proposals vs 2026 Approved Settlement Limits
- [OLD] Litigation Status:
2022 Certification Only - [OLD] Hourly Time Rate:
Unconfirmed - [OLD] Access / Fraud Caps:
Uncapped Estimates - [OLD] Out-of-Pocket Cap:
Unverified Projections - [OLD] Legal Status:
Pending Mediation
- [NEW] 2026 Approved Fund: $8.7 Million CAD Total
- [NEW] Hourly Time Rate: $20/Hour Official Rate
- [NEW] Access / Fraud Caps: $80 (4 hrs) / $200 (10 hrs)
- [NEW] Out-of-Pocket Cap: Up to $5,000 CAD Verified
- [NEW] Legal Status: Approved (2026 FC 590)
🧮 2026 CRA Settlement Payout Simulator
Check your potential time-loss amount now before the deadline. Utilize our 2026 CRA Data Breach Class Action Settlement Estimator to gauge your potential compensation based on the official court-approved rate of $20/hour (up to 4 hours / $80 for Access Claims, and up to 10 hours / $200 for Fraud Claims).
Current Selection: 4 Hours
*Disclaimer: Calculations reflect the official $20/hour rate under Sweet v. His Majesty the King (2026 FC 590): up to 4 hours ($80 max) for unauthorized access alone, or up to 10 hours ($200 max) for fraudulent use of information, plus up to $5,000 for documented out-of-pocket expenses. Final payouts are subject to pro-rata adjustments based on total claims volume.
💡 Critical Facts Before You Take Action
💡 Stop: Before making any decisions, you must know these closely guarded rules. Swipe left to reveal 3 critical compliance facts that can streamline your approval process.
💡 Key Insight: Combining Categories
Eligible claimants can apply across multiple categories—combining Access ($80 max), Fraud ($200 max), and Special Compensation ($5,000 max) for a theoretical maximum recovery of up to $5,280 CAD if all criteria and documentation are met.
🛑 Warning: The Fee Trap
Never pay a third-party service a 30% contingency fee to file your claim. The official portal operated by the court-appointed administrator is completely free and takes only a few minutes to complete.
✅ Pro Action: Use 2020 Credentials
When checking your eligibility on the official portal, always enter the email address and partial SIN associated with your CRA or GCKey account in 2020 so the system accurately matches your breach record.
📝 CRA Settlement Key Takeaways & Quick Summary
The approval of the 2026 CRA Data Breach Class Action Settlement marks a significant milestone for privacy rights in Canada. Save this summary to ensure you execute your claim flawlessly.
📌 2026 Executive Brief
- Official Status: The $8.7M settlement (Sweet v. His Majesty the King, 2026 FC 590) was approved by the Federal Court on May 5, 2026.
- Time Compensation ($20/hr): Claim up to $80 (4 hours max) for unauthorized account access, and up to $200 (10 hours max) if your data was used for CERB/CESB/EI fraud.
- Out-of-Pocket Fund: Claim up to $5,000 from the Special Compensation Fund with receipts proving unreimbursed fraud losses, professional fees, or credit freeze expenses.
Execute your claim promptly to secure your rightful compensation under the 2026 CRA Data Breach Class Action Settlement.
🗣️ Official Guidance: Preparing Your Claim Records
According to official settlement guidelines, claimants filing for basic Access ($80 max) or Fraud ($200 max) compensation do not need to upload phone logs, as eligibility is verified directly against 2020 government breach records using your name, 2020 email address, and partial SIN. Supporting documents—such as invoices, receipts, and bank statements—are strictly required only when applying for up to $5,000 from the Special Compensation Fund.
❓ Frequently Asked Questions About the 2026 CRA Settlement
Our analysts have compiled the most urgent inquiries regarding the 2026 CRA Data Breach Class Action Settlement. Review these verified answers to ensure your compliance.
No. This specific $8.7M settlement (2026 FC 590) is strictly limited to the credential-stuffing attacks and privacy breaches that occurred between June and August 2020. Breaches outside this window are not covered.
No. Class action settlements compensating for privacy breaches, time lost, and out-of-pocket expenses are not considered taxable earned income. It will not trigger clawbacks on your existing federal benefits.
Under the court-approved protocol, you can claim $20 per hour up to 4 hours ($80 maximum) for unauthorized account access, $20 per hour up to 10 hours ($200 maximum) for addressing fraudulent benefit claims, and up to $5,000 from the Special Compensation Fund for documented out-of-pocket expenses.
No supporting documents are required for the standard Access ($80 max) or Fraud ($200 max) tiers; the portal verifies your eligibility against 2020 government breach records using your name, email, and partial SIN. Documentation is only required for the Special Compensation Fund (up to $5,000).
According to the court’s distribution protocol, if a compensation pool is oversubscribed, individual payouts are adjusted on a pro-rata (proportional) basis so that all approved claimants receive an equitable share of the available funds.