Case Information
Sweet v. His Majesty the King
Federal Court File No. T-982-20
Federal Court of Canada
Update
The Federal Court has approved the settlement of the Canada-wide class action concerning the alleged privacy breach of Government of Canada Online Accounts. The Defendant has agreed to pay $8,760,500.90 to settle all claims relating to the unauthorized disclosure of Class Members’ personal and/or financial information in Government of Canada Online Accounts, including notice and administration costs, in exchange for a full release of those claims (referred to as the “Settlement”).
What is this Class Action about?
The lawsuit alleges that inadequate safeguards allowed unauthorized third parties to access confidential personal and financial information in Government of Canada Online Accounts, including CRA “My Account,” My Service Canada accounts, and other accounts accessed using GCKey. In some cases, fraudulent applications for benefits were made. The Government of Canada denies any wrongdoing.
Who is included?
You are a Class Member if your personal or financial information in a Government of Canada Online Account was disclosed to a third party without authorization between March 1, 2020, and December 31, 2020, including those defined as *“Excluded Persons”.
Government of Canada Online Account includes:
- Canada Revenue Agency account
- My Service Canada account
- Any other Government of Canada online account accessed using GCKey
If you are unsure whether you are included, you can visit the Eligibility page to check your eligibility.
* Excluded Persons means all persons who contacted Murphy Battista LLP about the CRA privacy breach class action, with Federal Court file number T-982-20 prior to June 24, 2021.
Be advised that Excluded Persons are included in the Settlement.
It is important to understand that not all class members will be entitled to payments under the Settlement Agreement. Only those class members who were victims of unauthorized access by third parties to Class Members’ personal information contained in Government of Canada Online Accounts during the Credential Stuffing Attacks directed at the Government of Canada Online Accounts between June 15 and August 30, 2020 (the “Credential Stuffing Attacks”), and whose personal information was accessed, or accessed and used for fraudulent purposes, are entitled to payments under the Settlement Agreement.
If you received an e-mail with this Notice from the Claims Administrator, KPMG, you are eligible to apply for a payment under the Settlement Agreement. You can verify whether you are an eligible claimant by visiting the Eligibility page.
Compensation Structure
Class members who submit valid claims are expected to receive:
Access Claims: Up to $80 for time spent addressing issues related to unauthorized access.
Fraud Claims: Up to $200 for time spent addressing fraudulent use of personal information.
Special Compensation Fund: Up to $5,000 for out-of-pocket expenses related to the breach (e.g., unreimbursed fraud losses, identity theft costs).
Eligibility will be determined based on whether your information was accessed during the Credential Stuffing Attacks between June 15, 2020, and August 30, 2020.
Participate
If you are a Class Member, you do not need to do anything now. Please visit this website regularly for updates and instructions on how to apply for compensation.
Opting Out
The opt-out period ended on February 20, 2026, at 11:59 p.m. (PST).
Object
The objection period ended on February 20, 2026, at 11:59 p.m. (PST).
Important Dates
- Notice Period Begins: December 22, 2025
- Opt-Out Deadline: 11:59 p.m. PST on February 20, 2026
- Objection Deadline: 11:59 p.m. PST on February 20, 2026
- Approval Hearing: March 31, 2026, 9:30 a.m. PST
- Settlement Approved: May 5, 2026
More Information
Contact Class Counsel at classactions@rplelaw.com.
Contact Claims Administrator:
-
KPMG
600, de Maisonneuve Blvd. West
Suite 1500
Montréal, Québec H3A 0A3
Attention: Canada Privacy Breach Class Action Administrator - Toll-Free Phone number:: 1-833-724-6160
- Fax: 514-840-2390
- Email address: breachsettlementcanada@kpmg.ca
Documents
Below are the relevant documents that are available for your reference.
Reasons for Order (May 5 2026) (English only)
Download PDFOrder Approving Class Counsel Fees and disbursements (May 5 2026) (English only)
Download PDFOrder Approving the Settlement and other Relief (May 5 2026) (English only)
Download PDFNotice of Approval Hearing (EN)
Download PDFCourt Order – November 7, 2025 (English only)
Download PDF1 About the Class Action
This class action concerns a privacy breach involving Government of Canada Online Accounts, where unauthorized third parties accessed personal and financial information between March 1, 2020, and December 31, 2020. The accounts include:
- Canada Revenue Agency (“My Account”)
- My Service Canada Account
- Other Government of Canada online accounts accessed using GCKey.
The lawsuit alleges inadequate safeguards allowed unauthorized access, and in some cases, fraudulent applications for benefits. The Government of Canada denies any wrongdoing.
2 Class Member Definitions
You are a Class Member if:
- Your personal or financial information in a Government of Canada Online Account was disclosed to a third party without authorization during the specified period.
- This includes *“Excluded Persons” (those who contacted Murphy Battista LLP about the CRA privacy breach class action before June 24, 2021).
* Excluded Persons means all persons who contacted Murphy Battista LLP about the CRA privacy breach class action, with Federal Court file number T-982-20 prior to June 24, 2021.
Be advised that Excluded Persons are included in the Settlement.
It is important to understand that not all class members will be entitled to payments under the Settlement Agreement. Only those class members who were victims of unauthorized access by third parties to Class Members’ personal information contained in Government of Canada Online Accounts during the Credential Stuffing Attacks directed at the Government of Canada Online Accounts between June 15 and August 30, 2020 (the “Credential Stuffing Attacks”), and whose personal information was accessed, or accessed and used for fraudulent purposes, are entitled to payments under the Settlement Agreement.
If you received an e-mail with this Notice from the Claims Administrator, KPMG, you are eligible to apply for a payment under the Settlement Agreement. You can verify whether you are an eligible claimant by visiting the Eligibility page.
3 Terms of the Settlement
The settlement provides compensation for eligible Class Members:
- Access Claims: Up to $80 for time spent addressing unauthorized access of your personal financial information.
- Fraud Claims: Up to $200 for time spent addressing fraudulent use of your personal financial information.
- Special Compensation Fund: Up to $5,000 for out-of-pocket expenses related to fraudulent use of your personal financial information (e.g., unreimbursed fraud losses, identity theft costs, professional fees).
Eligibility will be determined based on whether your information was accessed during the Credential Stuffing Attacks (June 15 – August 30, 2020).
No. If you are a Class Member, you are automatically included unless you opted out by February 20, 2026, at 11:59 p.m. (PST). Please visit this website regularly for updates and instructions on how to apply for compensation.
The opt-out period ended on February 20, 2026, at 11:59 p.m. (PST).
The objection period ended on February 20, 2026, at 11:59 p.m. (PST).
4Compensation
- Access Claims: $20/hour for up to 4 hours (maximum $80).
- Fraud Claims: $20/hour for up to 10 hours (maximum $200).
- Special Compensation Fund: Up to $5,000 for documented out-of-pocket expenses.
Amounts may be reduced depending on the number of claims submitted.
5 Other
- Visit www.breachsettlementcanada.kpmg.ca
- Email breachsettlementcanada@kpmg.ca
- Phone 1-833-724-6160
Contact Class Counsel:
-
RICE PARSONS LEONI & ELLIOTT LLP
Suite #820 – 980 Howe Street,
Vancouver, BC, V6Z 0C8.
- Class Counsel Email: classactions@rplelaw.com
Contact Us
For more information about this class action or the settlement process, you can reach us through the following:
- Toll-Free Number: Call 1-833-724-6160 for general information.
- Email: breachsettlementcanada@kpmg.ca
- Fax: 514-840-2390
-
Mail/Courier:
KPMG
600, de Maisonneuve Blvd. West
Suite 1500,
Montréal, Quebec
H3A 0A3
Attention: Canada Privacy Breach Class Action Administrator
If you have questions regarding this class action, you may also contact Class Counsel, who represents the interests of Class Members and provides information and support at no cost if contacted:
-
Class Counsel Address:
RICE PARSONS LEONI & ELLIOTT LLP
980 Howe Street
Suite 820
Vancouver, BC
V6Z 0C8
- Class Counsel Email: classactions@rplelaw.com
Opt-Out
The opt-out period ended on February 20, 2026, at 11:59 p.m. (PST).
Objection
The objection period ended on February 20, 2026, at 11:59 p.m. (PST).
Settlement Compensation Eligibility Check
Please enter your information below to verify your compensation eligibility.
Verifying your eligibility...