$5280 CRA My Account Breach Claims 2026: Unlike many viral payment rumors circulating online, the CRA My Account breach claims 2026 settlement is genuinely real and has been confirmed directly by the Federal Court of Canada, CBC News, and the official Government of Canada website. On May 5, 2026, the Federal Court formally approved an $8.7 million class action settlement in the case Sweet v. His Majesty the King (2026 FC 590), resolving a lawsuit over the 2020 credential-stuffing cyberattacks that compromised thousands of CRA My Account and My Service Canada Account logins. Eligible Canadians whose accounts were accessed during these attacks between June 15 and August 30, 2020 can now qualify for compensation across three separate payout tiers, with a combined maximum of $5,280 per person. We’ll be updating this article monthly as the KPMG claims portal opens, new filing deadlines are confirmed, and payment distributions begin.
Because this is a real, court-approved settlement involving sensitive government accounts, it has also attracted a wave of scam messages falsely impersonating the legitimate process. This guide fact-checks every detail of the CRA My Account breach claims 2026 settlement against official court documents and the Government of Canada’s own notice, breaks down exactly how the $80, $200, and $5,000 compensation tiers work, walks through who qualifies and how to check your own eligibility right now, and explains how to avoid the scam messages already targeting affected Canadians.
$5280 CRA My Account Breach Claims 2026 Key Highlights
| Category | Verified Detail |
|---|---|
| Settlement status | Real and court-approved, not a rumor or scam |
| Case name | Sweet v. His Majesty the King (2026 FC 590) |
| Total settlement value | $8,760,500.90 |
| Amount allocated to class member compensation | About $6 million |
| Federal Court approval date | May 5, 2026 |
| Attack period covered | June 15 to August 30, 2020 (credential stuffing attacks) |
| Access Claim payout | Up to $80 ($20/hour, maximum 4 hours) |
| Fraud Claim payout | Up to $200 ($20/hour, maximum 10 hours) |
| Special Compensation Fund payout | Up to $5,000 for verified out-of-pocket losses |
| Maximum combined payout per person | $5,280 |
| Claims administrator | KPMG |
| Official portal | breachsettlementcanada.kpmg.ca |
$2400 CRA Payment 2026 Fact Check, Eligibility & Payment Date!
Canada’s New Citizenship Rule 2026: Why Dual Citizens Are Worried About Backup Passport Restrictions
Important Dates for the CRA Breach Settlement 2026
| Date | Development |
|---|---|
| June 15 to August 30, 2020 | Credential-stuffing attacks compromised Government of Canada online accounts |
| August 2022 | Federal Court certified the class action to proceed (Sweet v. Canada, 2022 FC 1228) |
| December 2025 | Parties reached a proposed settlement agreement |
| February 20, 2026 | Opt-out and objection deadline passed |
| March 31, 2026 | Federal Court held the final settlement approval hearing in Vancouver |
| May 5, 2026 | Federal Court formally approved the $8.7 million settlement |
| Late July to August 2026 | Claims portal expected to open, roughly 60 days after the appeal window closes |
| Portal opening plus 6 months | Filing window for eligible class members to submit claims |
| Late 2026 (expected) | Approved payments distributed via electronic transfer |
Fact Check: Is the CRA My Account Breach Claims 2026 Settlement Real?
Yes. Multiple independent, verifiable sources confirm this is a genuine, court-approved legal settlement, not a scam or unverified rumor:
- The Federal Court of Canada formally approved the settlement in a published legal decision, 2026 FC 590, on May 5, 2026.
- CBC News independently reported on the settlement, confirming the $8.7 million figure and the government’s agreement to pay affected Canadians.
- The Government of Canada’s own official website, Canada.ca, published a formal notice of the proposed settlement and approval hearing.
- KPMG, an internationally recognized professional services firm, was appointed by the court as the official claims administrator.
The only inaccurate or misleading versions of this story circulating online are scam messages that impersonate the real settlement to steal personal information or request upfront fees, which this guide addresses separately below.
What Caused the CRA My Account Breach?
Between June 15 and August 30, 2020, hackers carried out coordinated credential-stuffing attacks against Government of Canada online accounts accessed through the GCKey sign-in service and the CRA’s own login portal. Credential stuffing involves using usernames and passwords stolen from unrelated prior data breaches to attempt logins across many different websites, exploiting the fact that many people reuse the same password. In some confirmed cases, attackers used the compromised login credentials to file fraudulent Canada Emergency Response Benefit (CERB) claims or redirect legitimate payments, according to the original lawsuit filed by lead plaintiff Todd Sweet.
Who Qualifies for the CRA My Account Breach Claims 2026 Settlement?
You may be an eligible class member if your personal or financial information in a Government of Canada Online Account, including CRA My Account, My Service Canada Account, or any other account accessed using GCKey, was accessed or disclosed to an unauthorized third party during the credential-stuffing attack window. Two general categories of eligible claimants exist:
- Access only, no fraud: Your account was accessed by an unauthorized third party, but your information was not used fraudulently.
- Access and fraudulent use: Your account was both accessed and used for fraudulent purposes, such as a fake benefit application or diverted payment.
If you already received a direct email notification from KPMG about this settlement, you are automatically confirmed as an eligible class member. If you did not receive an email, you can still verify your status directly through the official portal using your last name, the last three digits of your Social Insurance Number, and the email address linked to your government online account.
How Much Can You Claim? Breaking Down the Three Compensation Tiers
The CRA My Account breach claims 2026 settlement pays compensation across three distinct tiers, and eligible claimants may qualify for more than one:
- Access Claims: Compensates for time and inconvenience spent addressing the breach, calculated at $20 per hour for up to 4 hours, for a maximum of $80.
- Fraud Claims: For claimants whose information was used fraudulently, compensation is calculated at $20 per hour for up to 10 hours, for a maximum of $200.
- Special Compensation Fund: Covers documented, out-of-pocket losses directly related to the breach, such as unreimbursed fraud losses, identity theft remediation fees, or credit monitoring and credit freeze costs, up to a maximum of $5,000 per claimant.
Combined, these three tiers produce a maximum possible payout of $5,280 per person. Because only about $6 million is allocated for compensation, payouts may be reduced on a pro-rata basis if total approved claims exceed the available fund.
How to Check Your Eligibility and Prepare to File
Even though the claims portal has not fully opened for submissions as of this writing, you can take these steps right now:
- Check your email and spam folder for any official correspondence from KPMG regarding the settlement.
- Visit the official portal at breachsettlementcanada.kpmg.ca and verify your status using your last name, the last three digits of your SIN, and your government account email address.
- Gather supporting documentation now, including any CRA correspondence about unauthorized account changes, records of fraudulent CERB or benefit applications made in your name, and receipts for credit monitoring, identity theft protection, or related professional fees.
- Watch for the portal opening announcement, expected roughly 60 days after the appeal window on the May 5, 2026 approval closes without challenge.
- File within the six-month window once the portal opens, since late submissions are typically not accepted in class action settlements.
Adult Child Sponsorship in Canada 2026: Immigration Pathways, Requirements and Alternatives
Scam Warning: Fake Messages Are Already Circulating
Because this settlement has received wide media coverage, fraudulent actors have begun sending fake “Settlement Claim” text messages and emails to Canadians, falsely claiming they are owed a payout and asking for personal or banking information. Keep these facts in mind:
- KPMG and the Federal Court will never ask you to pay a fee to release your settlement funds.
- The only legitimate way to check eligibility or file a claim is directly through breachsettlementcanada.kpmg.ca or by calling the official settlement phone line.
- If you receive a suspicious message referencing this settlement, do not click any links, and verify directly through the official portal instead.
Official Resources: Verify, Check Status & File Your Claim
| Purpose | Official Link |
|---|---|
| Official KPMG settlement portal (check eligibility, file claim) | https://www.breachsettlementcanada.kpmg.ca |
| Settlement phone line | 1-833-724-6160 |
| Government of Canada official settlement notice | https://www.canada.ca/en/government/system/digital-government/online-security-privacy/sweet-hmk-class-action-suit/notice-proposed-settlement-and-settlement-approval-hearing.html |
| CRA My Account login | https://www.canada.ca/en/revenue-agency/services/e-services/cra-login-services.html |
| My Service Canada Account login | https://www.canada.ca/en/employment-social-development/services/my-account.html |
| Report a scam related to this settlement | https://www.antifraudcentre-centreantifraude.ca |
FAQs
Is the CRA My Account breach claims 2026 settlement really real?
Yes. It was formally approved by the Federal Court of Canada on May 5, 2026, confirmed independently by CBC News, and published on the official Canada.ca website.
How much money can I actually claim?
Eligible claimants can receive up to $80 for an access claim, up to $200 for a fraud claim, and up to $5,000 from the Special Compensation Fund, for a combined maximum of $5,280.
When does the claims portal open?
The portal is expected to open in late July or August 2026, approximately 60 days after the appeal window on the May 5, 2026 approval closes without challenge.
How do I know if I’m an eligible class member?
If you received a direct email from KPMG, you are confirmed eligible. Otherwise, verify your status at breachsettlementcanada.kpmg.ca using your last name, the last three digits of your SIN, and your government account email.
What time period does this settlement cover?
Compensation is focused on Canadians affected by the credential-stuffing attacks between June 15 and August 30, 2020.
Will I get the full $5,280 if I qualify?
Not necessarily. Payouts may be reduced on a pro-rata basis if total approved claims exceed the roughly $6 million allocated for compensation.
What happens to unclaimed settlement money?
Any unclaimed funds will be donated to the Privacy and Access Council of Canada to support ongoing privacy research, rather than returning to the government.
Conclusion
The CRA My Account breach claims 2026 settlement is a confirmed, Federal Court-approved legal resolution, not a rumor, worth $8.7 million in total with roughly $6 million allocated directly to affected Canadians. Eligible class members whose accounts were compromised during the 2020 credential-stuffing attacks can claim up to $5,280 combined across the access, fraud, and special compensation tiers once the KPMG portal opens, expected in late summer 2026. If you believe you may be affected, check your eligibility directly through the official portal, start gathering supporting documents now, and stay alert to scam messages exploiting this real settlement’s publicity. This article reflects the most current, verified court and government data available. We’ll continue updating it monthly as the portal opens and new filing details are confirmed.
Also Read
CRA My Account Breach Claims 2026: How Eligible Canadians Could Seek Up to $5,280 in Compensation
Ontario Trillium Benefit Payment for 2026 Full Schedule: What’s the Reality Check About It?
