鶹ý

Skip to main content

Class action lawsuit launched against federal government over CRA cyberattack

The Canada Revenue Agency headquarters in Ottawa is pictured on November 4, 2011. The federal revenue agency says it doesn't know what sort of taxpayer information a rogue employee improperly shared with the Canadian Security Intelligence Service because CSIS has wiped the files from its database. THE CANADIAN PRESS/Sean Kilpatrick The Canada Revenue Agency headquarters in Ottawa is pictured on November 4, 2011. The federal revenue agency says it doesn't know what sort of taxpayer information a rogue employee improperly shared with the Canadian Security Intelligence Service because CSIS has wiped the files from its database. THE CANADIAN PRESS/Sean Kilpatrick
Share

The Federal Court of Canada has certified a class action lawsuit against the federal government, which alleges negligence in “safeguarding the confidential information of Canadians, leading to widespread privacy breaches.”

The suit follows cyberattacks that targeted Canada Revenue Agency accounts and other government services back in 2020.

The plaintiff, Todd Sweet, a retired police officer from B.C., claims that “inadequate safeguards” within several online government portals threw sensitive information in jeopardy, allowing “bad actors” to access the online accounts of Canadians without their consent.

Along with claiming private accounts were breached, Sweet alleges that hackers were able to fraudulently apply for the Canada Emergency Response Benefit (CERB), possibly disqualifying the people in need from receiving the necessary funding.

Sweet is asking the court to order the Canadian government to financially compensate those whose accounts were compromised, as well as issue monitoring services that may be needed to repair the harm imposed.

The allegations made in the lawsuit have not been tested in court. According to the the federal government denies any wrongdoing in the matter.

In August 2020, the CRA temporarily suspended its online services after two cyberattacks compromised thousands of stolen usernames and passwords.

According to the federal government, a total of 11,200 accounts for federal government services were targeted in what was described as "credential stuffing" schemes – a ploy in which hackers use passwords and usernames from other online portals to access Canadians' accounts with the CRA.

Officials said they first discovered the security breaches on Aug. 7, 2020, but didn’t contact the RCMP until Aug. 11, 2020.

Anyone whose personal or financial information in their Government of Canada Online Account was accessed by an unauthorized third party between March 1 and Dec. 31 of 2020 is automatically included in this class action. Government of Canada Online Accounts include CRA accounts, My Service Canada accounts and any other federal government services that are accessed using GCKey.

Those affected by these security breaches don’t need to do anything to be involved in these class action proceedings, but can choose to opt out of the lawsuit, the notice said.

They can opt out by filling out a form posted on the of the law firm representing the case.They must do this by Nov. 27.

An opt-out form and email address can also be found at the bottom of the

The notice further explained that damages will be sought for the class as a whole, meaning the judge would determine how any compensation should be divided among affected members.

CTVNews.ca Top Stories

BREAKING

BREAKING

Premier Doug Ford says he wants to build a tunnel under Highway 401 that would stretch from Brampton to Scarborough.

Haitian group in Ohio files citizen criminal charges against Trump and Vance

The leader of a nonprofit representing the Haitian community invoked a private-citizen right to file charges Tuesday against former U.S. president Donald Trump and his running mate, JD Vance, over the chaos and threats experienced by Springfield, Ohio, since Trump first spread false claims about legal immigrants there during a presidential debate.

We've all had neighbours we didn't like, but two people from Sault Ste. Marie have been awarded more than half a million dollars for the 'extreme' behaviour of the people who lived next to them.

Local Spotlight

Police are looking to the public for help after thieves broke into a Lethbridge ice creamery, stealing from the store.

An ordinary day on the job delivering mail in East Elmwood quickly turned dramatic for Canada Post letter carrier Jared Plourde. A woman on his route was calling out in distress.

Fire has destroyed a barn and 17,000 plants at a family-owned business in Lower Coverdale, N.B.

Before influencers on social media, Canada’s Jeanne Beker was bringing the world of high fashion down to earth and as Calgary’s Glenbow Museum gets a major make-over, it will include a new exhibition showcasing the pop culture icon.

A sea lion swam free after a rescue team disentangled it near Vancouver Island earlier this week.

A Nova Scotian YouTuber has launched a mini-truck bookmobile.

Cole Haas is more than just an avid fan of the F.W. Johnson Wildcats football team. He's a fixture on the sidelines, a source of encouragement, and a beloved member of the team.

Getting a photograph of a rainbow? Common. Getting a photo of a lightning strike? Rare. Getting a photo of both at the same time? Extremely rare, but it happened to a Manitoba photographer this week.

An anonymous business owner paid off the mortgage for a New Brunswick not-for-profit.

Stay Connected