August 31, 2026 · Canada · Claims close February 3, 2027
In 2020, attackers took username and password pairs leaked from other websites and tried them against Government of Canada online services. That technique is called credential stuffing, and it works for one reason: people reuse passwords. Where a pair matched, the attacker was inside a real person's government account.
The accounts reached this way included CRA My Account, Represent a Client, My Service Canada Account, and others accessed through GCKey: the shared sign-in the federal government uses across departments. A class action followed, and the settlement in Sweet v. His Majesty the King has since been approved.
Canadian residents whose personal or financial information held in a Government of Canada online account was disclosed to a third party without authorization, primarily through those 2020 attacks. There is one condition that catches people out: claimants must not have opted out before the opt-out deadline of February 20, 2026.
Whether any individual qualifies is the administrator's determination, not ours and not a journalist's. If you think your account was among them, the claim form is where that gets decided.
Not one range: three separate claims, and which one applies to you depends on what actually happened to your account.
Which is why the C$5,000 figure that circulates on social media is misleading rather than wrong. It exists, and almost nobody receives it. It is a documented-loss fund, not what a claim is "worth". The administrator assesses each claim against the settlement's own categories.
Nobody can tell you your number in advance, and anyone who does is guessing.
Through KPMG, the court-appointed administrator. That is the only place a claim can be filed: no app, service, or website can submit it for you, and none should be asking you for a cut.
Most class action settlements pay out a few dollars on a purchase you barely remember. This one has a C$5,000 ceiling and a window running into 2027, and it covers accounts that a very large number of Canadians hold: anyone who has ever filed taxes online has a CRA My Account.
It is also the kind of settlement people miss. There is no email from the government telling you that you qualify. The notice period passed, the news cycle moved on, and the deadline sits fifteen months out where nobody is looking.
The Government of Canada's own statement on the notice of settlement approval, and the administrator's claim site linked above. PayUpBro checks every settlement it lists against the administrator before publishing it, and removes them once the deadline passes.
See every settlement currently open in Canada and the US →
PayUpBro is not a law firm and never files a claim for you. This page is a plain-language summary of a public court matter, not legal advice. Whether you qualify is decided by the court-appointed settlement administrator.