Skip to content
Canada Revenue Agency

CRA COVID Benefit Cyberattack Class Action Filed

CRA COVID Benefit Cyberattack Class Action Filed

A proposed class-action lawsuit accuses the Canada Revenue Agency of a “reprehensible” response to cyberattacks that hit COVID-19 benefit accounts, according to a report from CBC News. The CRA COVID-19 benefit cyberattack claim centres on Canadians whose accounts were compromised during the pandemic era, when emergency payments such as the Canada Emergency Response Benefit were flowing through the agency’s systems.

CBC reported that the legal filing describes the agency’s handling of the breaches in strong terms, using the word “reprehensible” to characterize its conduct. The suit is described as a proposed class action, meaning a court has not yet certified it to proceed on behalf of a group.

Because the material available is limited to CBC’s report, several specifics of the case are not stated here. What follows sets out what is known and points affected readers to where they can verify the details.

What is the CRA COVID-19 benefit cyberattack lawsuit about?

The core allegation, as reported by CBC News, is that the CRA mishandled cyberattacks that targeted COVID-19 benefit accounts. During the pandemic, fraudsters used stolen credentials and other techniques to access government accounts, and some Canadians found benefits claimed in their names without their knowledge.

The proposed class action argues the agency’s response fell short. The exact legal grounds, the amount of damages sought, and the specific security failures alleged are not detailed in the headline material available, so those points should be confirmed through the full CBC report.

Who could be affected?

The people at the centre of the case are COVID-19 benefit recipients whose accounts were caught up in the cyberattacks. Based on CBC’s reporting, that group broadly includes:

  • Account holders hit by the breaches: Canadians whose CRA accounts were accessed without authorization during the pandemic.
  • Benefit claimants affected by fraud: Those who found emergency benefits applied for or redirected in their names.

The precise definition of the class, including cut-off dates and qualifying criteria, would be set out in the court filing and any certification decision. Those particulars are not specified in the material at hand.

What is a proposed class action, and what happens next?

A proposed class action is a lawsuit that one or more individuals file on behalf of a larger group, but it does not automatically move forward as a group claim. A court must first decide whether to certify it. Until that happens, the allegations remain untested, and the CRA has not been found liable.

Because certification and any eventual settlement or trial can take months or years, there is no confirmed payout, claim window, or deadline at this stage. Readers should not expect compensation unless and until a court certifies the case and it is resolved in the claimants’ favour.

How can I verify the details or follow the case?

The reporting on this proposed class action comes from CBC News. For the full account, including any quotes from the plaintiffs, their lawyers, or the CRA’s response, read the original CBC article, which you can reach through the link tied to this story.

To confirm the status of the case or find out whether you are covered, watch for official notices, since certified class actions in Canada typically require formal notice to potential class members. Law firm websites and court registries are also standard places where updates and instructions for affected people are posted.

What should affected benefit recipients do now?

Because no claim process has opened, there is nothing to file yet. Even so, people who believe their COVID-19 benefit accounts were compromised can take practical steps:

  • Check your CRA account: Review your online account for benefit applications or changes you did not make.
  • Report suspected fraud: Contact the CRA directly if you spot activity you do not recognize.
  • Keep your records: Save any correspondence, screenshots, or notices related to the breach, which may matter if the class action proceeds.
  • Watch for official updates: Follow CBC’s coverage and any court-ordered notices for news on certification and next steps.

As more becomes public about the CRA COVID-19 benefit cyberattack case, the class definition and any compensation process should become clearer. For now, the key fact is that a proposed class action has been brought, and CBC News has reported that it labels the agency’s handling of the breaches “reprehensible.”

Informer News Team

Informer News staff coverage of official tax, benefits, pension, and legal-settlement news for readers in Canada.