Eligible Canadians Can Claim Compensation in 2020 Government Breach Settlement
In a significant development for privacy advocates and affected individuals, a class-action settlement has been reached regarding the 2020 cyberattacks on Government of Canada online services. The settlement covers Canadians whose personal or financial information was accessed through compromised accounts, including the Canada Revenue Agency’s My Account, My Service Canada Account, and other services accessed via GCKey. While the government has consistently maintained that it faces ongoing cyber threats and the settlement does not constitute an admission of liability, it offers a pathway for compensation to those impacted.
However, it’s crucial to understand that not all class members are automatically eligible for payments. KPMG, the settlement administrator, emphasizes that eligibility criteria must be met. The settlement primarily benefits two groups: those who experienced documented financial losses as a direct result of the breach, and those whose personal information was compromised. For many, the more substantial part of the settlement is the reimbursement fund for proven financial losses, which could cover expenses such as fraudulent transactions or costs incurred to mitigate identity theft.
To file a claim, individuals must have had an account with CRA My Account, My Service Canada Account, or a GCKey-linked service during the relevant period. The claims process requires providing evidence of the impact, such as bank statements or police reports. It’s important to note that any settlement funds remaining after approved claims are paid will be transferred to the Privacy and Access Council of Canada to support independent privacy research, ensuring that the settlement also contributes to broader privacy protections.
This settlement serves as a stark reminder of the importance of robust online security practices. As cyberattacks continue to target both public and private organizations, using strong, unique passwords and enabling multi-factor authentication has never been more critical. For eligible Canadians, this is an opportunity to seek redress, but it also underscores the need for vigilance in protecting personal information online. If you believe you were affected, it’s advisable to review the settlement details and submit a claim before the deadline.
Shimanta Das 
