CRA Data Breach Settlement: How to Claim Your Share of $8.7 Million

What this means for you: If the Canada Revenue Agency (CRA) notified you that your personal data was stolen in 2023, you are likely eligible for a cash payment. You must act quickly and file a claim to get paid.

The Government of Canada has agreed to pay $8.7 million to settle a class-action lawsuit. This settlement covers Canadians affected by two specific security breaches that hit the CRA’s "My Account" portal in 2023.

The Details

In 2023, cyberattacks targeted the CRA’s online systems. These breaches exposed sensitive personal information, including Social Insurance Numbers (SIN), addresses, and direct deposit banking details.

Following these events, a class-action lawsuit was launched against the government. The recently agreed-upon settlement means that compensation is now available for victims.

Key Numbers to Know

• Total Settlement: $8.7 million
• Estimated Payment Range: $100 to $600 per person
• The Deadline for Claims: You must submit your claim by January 3, 2025.

Note: The exact amount you receive depends on how many people submit valid claims. If many people apply, the individual payout decreases.

Who is Affected?

You are part of this settlement if:

1. You were a victim of identity theft related to the CRA breaches between March 1, 2023, and December 31, 2023.
2. You received a notification from the CRA stating that your personal information was compromised during these specific incidents.

If you received a letter or email from the CRA about a data breach during this period, you should proceed with a claim.

What You Should Do

To receive your payment, you cannot simply wait for a cheque. You must take the following steps:

1. Verify Your Eligibility: Check your records for a notification from the CRA regarding the 2023 breach.
2. Find the Claim Form: You can download the claim form from the official settlement administrator website. (Look for information regarding Browne v. Canada).
3. Submit Your Claim: Fill out the form completely. You must submit it by January 3, 2025.
4. Keep Records: Keep a copy of your submitted form and any confirmation numbers for your records.

Bottom Line

If the CRA told you your data was stolen in 2023, you have a right to compensation. The money is not automatic; you must file a claim by January 3, 2025. Mark this date on your calendar and submit your form as soon as possible to ensure you receive your share of the $8.7 million settlement.