Canada Class Action Lawsuit Statistics 2026 | CRA Settlement, Eligibility & Facts

Class Action Lawsuit in Canada 2026

Class action lawsuits in Canada reached a genuine inflection point this week, with the claims process for one of the country’s most closely watched privacy-breach settlements officially opening on August 5, 2026. The Sweet v. His Majesty the King settlement — stemming from a 2020 cyberattack that compromised thousands of Canada Revenue Agency (CRA) and Service Canada accounts — will see the federal government pay $8,760,500.90 to resolve claims, with eligible Canadians able to receive up to $5,000 depending on how their information was used. This settlement lands amid a broader surge in Canadian class action activity: 203 new applications for authorization or certification were filed across Quebec, Ontario, and British Columbia in 2025 alone, an 11% increase over 2024, with data privacy filings nearly tripling year-over-year.

This report compiles the key verified statistics on Canada class action lawsuits in 2026, with a focused deep-dive into the CRA data breach settlement’s eligibility criteria, compensation tiers, and claims process, alongside broader national trends in class action filings, settlement values, and the other major national class actions currently accepting claims. Sources include Canada.ca’s official Sweet v. HMK settlement notice, the Federal Court, KPMG as claims administrator, CBC News, and Torys LLP’s annual review of Canadian class action activity. Because the CRA settlement’s claims window remains open through early 2027, this article notes which figures are final and which remain subject to the ongoing claims process.

Interesting Facts About Canada Class Action Lawsuits 2026

Source: Canada.ca Sweet v. HMK Class-Action Suit notice; CBC News, August 6, 2026; Torys LLP “Class actions in Canada: a review of 2025,” March 2026; MTL Blog, June–August 2026

The numbers above capture a Canadian class action landscape operating on two distinct tracks simultaneously: a single, high-profile federal government settlement now moving through its active claims phase, and a broader structural surge in new filings across the country’s three leading class action jurisdictions. The CRA settlement’s $8.76 million total value, while modest compared to some of Canada’s largest recent settlements, is significant specifically because of how many Canadians it could potentially touch — tens of thousands of people whose CRA, Service Canada, or GCKey-linked accounts were compromised during a wave of credential-stuffing attacks in 2020, some of which were subsequently used to file fraudulent Canada Emergency Response Benefit (CERB) claims in victims’ names.

What stands out most nationally is the 11% year-over-year increase in new class action filings, continuing a multi-year growth trend that has established Canada, and Quebec specifically, as an increasingly active jurisdiction for this type of litigation. The finding that data privacy filings nearly tripled in 2025 is particularly relevant to the CRA case, since it suggests the Sweet v. HMK settlement is not an isolated event but part of a broader wave of Canadians turning to the courts over digital data mishandling by both government and private-sector entities.

The Sweet v. HMK / CRA Data Breach Settlement 2026

CRA DATA BREACH SETTLEMENT — KEY TIMELINE
════════════════════════════════════════════════════════════════════
Aug 2020       Credential stuffing attacks hit GCKey and CRA accounts
2020-2021      Todd Sweet files class action against CRA/Government of Canada
Mar 31, 2026   Settlement Approval Hearing held
May 5, 2026    Federal Court approves $8,760,500.90 settlement
Aug 5, 2026    Claims process officially opens
Feb 3, 2027    Claims submission deadline
════════════════════════════════════════════════════════════════════

Source: Canada.ca official Sweet v. HMK notice; Daily Hive, May 7, 2026; CBC News, August 6, 2026

The legal path from initial breach to final settlement spanned nearly six years, beginning with the August 2020 credential-stuffing attacks and concluding with a March 31, 2026 settlement approval hearing and May 5, 2026 Federal Court approval. Credential stuffing — where attackers use usernames and passwords stolen from unrelated prior data breaches to attempt logins on entirely different platforms — proved effective against Government of Canada systems specifically because many Canadians reused login credentials across multiple online services, a vulnerability that existed independent of any single flaw in CRA’s own systems.

Justice Southcott’s approval ruling, finding the settlement terms “fair, reasonable, and in the best interests of the class as a whole,” followed the government’s consistent legal position throughout the litigation: while agreeing to pay the settlement amount, the Government of Canada has not admitted wrongdoing, framing the payment instead as a negotiated resolution to avoid the cost, delay, and uncertainty of continued litigation. This is a standard structure for large institutional settlements and does not affect eligible claimants’ ability to receive compensation under the agreed terms.

CRA Settlement Eligibility Criteria 2026

Source: Narcity, “The government of Canada class action lawsuit is accepting claims for the $8.7M settlement,” August 2026; CBC News, August 6, 2026

The settlement’s eligibility structure creates two distinct tiers of potential claimants, a nuance that CBC News and other outlets have specifically flagged as important for Canadians to understand before submitting a claim. The broader class covers anyone whose information in a qualifying Government of Canada account was disclosed without authorization at any point during the ten-month window from March through December 2020. However, only those who fall within the narrower June 15 to August 13, 2020 window, and whose information was both accessed and subsequently used for fraudulent purposes, qualify for the highest compensation tier — meaning simple exposure during the broader window does not automatically guarantee the maximum $5,000 payout.

Canadians who received a direct notification email or letter from KPMG containing a personal PIN have the most straightforward path to filing a claim, since this confirms their inclusion in the settlement class. For those who did not receive such notification but believe they may qualify, the self-verification process — requiring a last name, the last three digits of a Social Insurance Number, and an email address — provides an alternative route to check eligibility directly through the KPMG-administered claims portal, though claimants should verify they are using the official government-linked KPMG site given the settlement’s high public profile and the associated risk of scam attempts impersonating the legitimate claims process.

Class Action Filing Trends Across Canada 2026

NEW CLASS ACTION APPLICATIONS BY PROVINCE — 2025
════════════════════════════════════════════════════════════════════
Quebec           ████████████████████████████████████████  100 filings (49%)
British Columbia █████████████████████████░░░░░░░░░░░░░░░  61 filings (30%)
Ontario          ████████████████████░░░░░░░░░░░░░░░░░░░░  ~42 filings (21%)
════════════════════════════════════════════════════════════════════
Total: 203 new applications | +11% vs. 2024

Source: Torys LLP, “Class actions in Canada: a review of 2025,” March 2026; Lifetimes Canada, “Class Action Lawsuits Canada 2026,” July 2026

Quebec’s continued dominance of Canadian class action filings, capturing nearly half of all new applications nationally at 100 of 203, reflects the province’s comparatively low authorization threshold under its Civil Procedure rules — a structural feature of Quebec’s legal system that has made it the preferred jurisdiction for plaintiffs’ counsel pursuing class litigation for years. British Columbia’s 30% share, second only to Quebec, confirms the province’s growing role as a significant proposed class action market, while Ontario, despite being Canada’s most populous province, trails both in relative filing volume.

The finding that data privacy filings nearly tripled in 2025 provides essential context for understanding why the CRA settlement, while itself originating from a 2020 incident, is landing amid a genuinely accelerating wave of similar litigation. Automotive filings more than tripling over the same period reflects growing scrutiny of vehicle defects and manufacturer disclosures, while the marked drop in securities and state liability actions suggests plaintiffs’ counsel resources have shifted toward these emerging growth categories. For readers interested in how these underlying data privacy and cybersecurity failures compare to broader Canadian crime trends, our Crime Statistics in Canada 2025 report documents that Canada’s cybercrime rate remains more than double its 2018 level despite a 9% year-over-year decrease in 2024, offering useful context for the underlying threat environment driving cases like Sweet v. HMK.

Other Major Canadian Class Action Settlements Active in 2026

Source: Daily Hive, “Class-action settlements Canadians could cash in on in 2026,” June 2026; Klein Lawyers Class Actions Archive; FileYourClaim.co, July 2026

Placed alongside the CRA settlement, the broader landscape of active Canadian class actions reveals settlements spanning a vastly different range of scale and subject matter — from the roughly $2 billion Indigenous boarding homes settlement and $1 billion-plus Indian Hospitals settlement, both addressing decades of historical institutional harm, down to more modest consumer-protection matters like the $6.5 million Silk and Great Value plant-based beverage recall stemming from a 2024 product recall. This range illustrates that Canada’s class action system handles everything from small consumer refunds to some of the largest reconciliation-related compensation payments in the country’s history within the same basic legal framework.

The Indian Hospitals settlement’s tiered compensation structure, ranging from $10,000 to $200,000 per eligible individual depending on the severity of documented harm, stands in sharp contrast to the CRA settlement’s flat $5,000 maximum, reflecting the fundamentally different nature of the underlying harms: one addresses systemic historical abuse with lasting individual impact, while the other compensates for a discrete data exposure event with generally more limited direct financial consequences per affected person. Notably, most Canadian class actions — including the CRA settlement — operate on an opt-out basis, meaning eligible Canadians are automatically included in the class without needing to actively join, and only need to take action once a settlement is reached and a claims window opens.

Financial Impact and Fraud Connection of the CRA Breach 2026

Source: CBC News, August 6, 2026; The Global Statistics-referenced CRA settlement coverage; The World Data, Crime Statistics in Canada 2025

The connection between the 2020 CRA breach and fraudulent CERB claims is one of the most consequential aspects of this case, since it demonstrates how a data security failure in one government system can directly enable financial fraud through an entirely separate emergency benefit program launched during the COVID-19 pandemic. Attackers who successfully accessed compromised CRA or Service Canada accounts were, in documented cases, able to leverage that access to submit fraudulent CERB applications, compounding the harm to victims beyond simple data exposure into direct financial and administrative consequences that some claimants are still working to resolve years later.

This pattern of stolen credentials enabling downstream fraud reflects a broader vulnerability documented across Canada’s cybercrime landscape more generally: with identity fraud rates climbing 2% in 2024 and the national cybercrime rate still running more than double its 2018 level, the CRA breach represents one high-profile, government-specific instance of a threat pattern playing out across both public and private sector systems nationwide. For a deeper look at how credential theft specifically fuels this kind of downstream fraud across North America, our Phishing Statistics in US report documents how account takeover and credential-based attacks have become the leading initial vector for data breaches more broadly, a pattern directly mirrored in the CRA case’s underlying attack methodology.

How to File a Claim: CRA Settlement Process 2026

Source: Narcity, August 2026; Canada.ca Sweet v. HMK notice

The claims process itself requires no legal representation and carries no cost to eligible Canadians, consistent with how most Canadian class action settlements operate — class counsel are compensated directly from the settlement fund on a contingency basis, meaning claimants never pay out of pocket to participate. Given the settlement’s high public profile since the May 2026 approval, consumer protection advocates have specifically urged Canadians to verify they are using official channels — Canada.ca and the KPMG-administered breachsettlementcanada.kpmg.ca domain specifically — before submitting any personal information, since high-profile settlements of this kind frequently attract phishing and scam attempts designed to impersonate the legitimate claims process.

With the claims window remaining open until February 3, 2027, eligible Canadians have a substantial runway to gather documentation and submit their claims, particularly those pursuing the higher compensation tier who may need to provide evidence connecting the account access specifically to fraudulent use during the narrower June-to-August 2020 window. For readers wanting a broader understanding of how stolen personal data circulates and gets exploited after breaches like this one, our Dark Web Statistics report documents how compromised credentials from incidents such as the 2020 CRA breach often continue circulating on criminal marketplaces years after the original exposure, underscoring why settlements like this one remain relevant to claimants’ ongoing security posture even years after the initial incident.

Data Reliability Notes for Canada Class Action Lawsuit Statistics 2026

Source: Cross-referenced Canada.ca, CBC News, KPMG, and Torys LLP data, current as of August 2026

Because the Sweet v. HMK claims process only opened on August 5, 2026 and remains active through February 3, 2027, this report cannot yet provide final figures on how many Canadians ultimately filed claims, how many were approved, or the average payout amount across all approved claims. Readers should treat the $5,000 maximum compensation figure as an upper bound available only to claimants meeting the higher-tier eligibility criteria, not as a typical or guaranteed payout for all class members. As the claims process progresses through the remainder of 2026 and into early 2027, more complete settlement administration data is expected to become available through official Canada.ca updates and KPMG’s claims administrator reporting.

Disclaimer: This research report is compiled from publicly available sources. While reasonable efforts have been made to ensure accuracy, no representation or warranty, express or implied, is given as to the completeness or reliability of the information. We accept no liability for any errors, omissions, losses, or damages of any kind arising from the use of this report.

Email ID:

Please enable JavaScript in your browser to complete this form.

Email

Email *

SUBSCRIBE