Federal data breach: you could receive over $5,000
Federal data breach: you could receive over $5,000
Individuals whose personal information was compromised during cyberattacks targeting federal government online services during the COVID-19 pandemic may be eligible for compensation of up to $5,280.
The Federal Court recently approved an $8.76 million settlement ending a class-action lawsuit against the Government of Canada following cyberattacks that occurred between June and August 2020. The lawsuit alleged, among other things, negligence in protecting personal information. However, the government did not admit any liability in the settlement.
To be eligible, an individual’s personal information must have been accessed without authorization between March 1st and December 31st, 2020, through an online account with the Canada Revenue Agency, Service Canada, or another federal portal. Eligibility is linked to credential stuffing attacks that occurred between June 15th and August 30th, 2020.
Three forms of compensation are available:
- $80 for individuals whose information was accessed without authorization;
- Up to $200 for victims who had to spend time resolving a fraud case;
- Up to $5,000 to reimburse financial losses and expenses directly related to the incident, upon presentation of supporting documentation.
In some cases, all three amounts can be combined, for a maximum total of $5,280.
Individuals wishing to verify their eligibility can do so online with the settlement administrator, KPMG. Claims must be submitted by February 3rd, 2027. Claims submitted online will be processed more quickly than those sent by mail.
