If you received Canada Child Benefit payments or filed taxes between 2018 and 2020, you may be eligible to file a claim in the newly opened compensation process for the 2020 Canada Revenue Agency data breach. On August 6, 2026, the claims window officially opened for tens of thousands of Canadians whose sensitive financial and personal information was compromised when hackers breached government portals six years ago. You have until February 3, 2027 to submit your claim through KPMG, the administrator handling the settlement.
For parents managing custody arrangements and shared parenting responsibilities, this breach carries particular weight. The compromised CRA accounts contained detailed financial data that many co-parents rely on to calculate child support, verify income for custody modifications, and manage benefit entitlements. If your account was affected, a stranger may have accessed information about your Canada Child Benefit amounts, your reported income, your children’s care arrangements, and other financial details that directly impact your family law matters.
The Treasury Board of Canada Secretariat has characterized the settlement as fair and reasonable while emphasizing it’s not an admission of wrongdoing. That offers little comfort to parents who’ve spent years wondering whether their custody-related financial information was exposed or misused. The practical question now isn’t about fault but about action: determining whether you’re affected, understanding what compensation you can claim, and taking steps to protect your family’s financial privacy going forward.
This update walks you through what happened in the 2020 breach, how to verify if your information was compromised, the claims process itself, and specific considerations for parents navigating child support and benefit calculations in the aftermath.
What Changed: The Claims Process Is Now Open
The Canada Revenue Agency data breach that exposed sensitive information in 2020 has reached a critical milestone. On August 6, 2026, the compensation claims process officially opened for tens of thousands of Canadians whose personal and financial data was compromised when hackers accessed government portal accounts six years ago. If you’re a parent who received Canada Child Benefit payments or filed custody-related tax claims during that period, this settlement may apply to you.
KPMG, the accounting firm managing the claims process, is handling all submissions and eligibility determinations. The Treasury Board of Canada Secretariat approved the settlement as fair and reasonable for affected class members, though the government maintains this is not an admission of wrongdoing. That legal distinction matters less to parents than the practical reality: if your information was exposed, you have until February 3, 2027, to submit a claim.
Determining eligibility starts with understanding whether your CRA portal account was among those breached in 2020. Parents who accessed their My Account to check Canada Child Benefit payments, update custody arrangements affecting benefit calculations, or review tax information related to child support during that year should investigate whether they received notification about the breach. If you’re unsure, contacting KPMG directly through the claims portal can clarify your status. The compensation process recognizes that exposed data creates real risks, particularly for separated parents whose financial transparency is already scrutinized in custody and support proceedings.
Key Developments: Understanding the 2020 Breach and Its Impact
1. The Scope of the Breach: Tens of Thousands Affected
In the spring of 2020, hackers accessed accounts on the Canada Revenue Agency’s My Account portal, exposing sensitive financial and personal information belonging to tens of thousands of Canadians. The breach compromised data that many parents rely on to manage their children’s well-being after separation: income details, benefit payment records, tax filing information, and documentation related to family programs like the Canada Child Benefit and GST/HST credit.
If you were receiving the Canada Child Benefit or had recently updated your custody arrangements through CRA forms, your account may have contained information about your child’s living arrangements, your income relative to your co-parent’s, and your shared benefit entitlements. This data is particularly valuable to identity thieves because it paints a complete picture of your family’s financial situation during a vulnerable transition period.
Parents who filed taxes around the time of the breach and reported changes in marital status, custody percentages, or dependent claims faced heightened exposure. The stolen information could reveal not just your income but also whether you were the primary caregiver for benefit purposes, how much child support you were claiming or paying, and which parent was claiming which tax credits. That level of detail about your family’s financial restructuring makes you a specific target for fraud, particularly if someone tries to impersonate you to redirect benefit payments or access your CRA account again.
2. Government Settlement Without Admission of Wrongdoing
The Treasury Board of Canada Secretariat has characterized the compensation settlement as “fair, reasonable, and in the best interests of class members”, but it explicitly states this settlement is not an admission of wrongdoing by the federal government. This careful legal phrasing might sound like bureaucratic hedging, yet it carries real implications for affected families.
What does this stance mean in practical terms? The government is compensating Canadians whose sensitive information was compromised while maintaining that its security measures met acceptable standards at the time of the 2020 breach. For parents who rely on the CRA portal to manage Canada Child Benefit claims and file custody-related tax information, this position offers little reassurance about whether similar vulnerabilities still exist.
The “no admission of fault” clause also limits the settlement’s impact on future government accountability. Without acknowledging specific security failures, there’s no public commitment to concrete improvements in how the CRA protects family financial data. For divorced and separated parents, this matters because your tax information directly affects child support calculations, benefit entitlements, and sometimes custody proceedings.
The settlement provides immediate compensation for those harmed by the breach, which is valuable. But it doesn’t guarantee the systemic changes needed to prevent future exposures of sensitive parenting and financial information stored in government databases.
3. Programs and Benefits That May Have Been Exposed
The 2020 breach targeted CRA My Account and other government portals where Canadians manage their tax and benefit information. For separated and divorced parents, this means several programs containing sensitive family financial data may have been compromised:
- Canada Child Benefit (CCB), includes custody arrangements, shared parenting percentages, and income information used to calculate monthly payments
- GST/HST Credit, contains household income data and marital status updates that affect eligibility
- Canada Workers Benefit, tracks employment income and family composition that divorced parents use for low-income support
- Disability Tax Credit, holds medical and dependent care information, including claims for children with special needs
- My Account access, stores complete tax filing history, direct deposit details, and correspondence about support payments or benefit disputes
The Canada Child Benefit data presents particular concern for co-parents because it documents which parent receives payments, how custody percentages affect benefit amounts, and income discrepancies that might arise during separation. This information, in the wrong hands, could be used for identity theft targeting benefit payments or to manipulate custody-related financial disputes.
Parents who updated their marital status, filed for shared custody benefits, or reported changes to their living arrangements through the CRA portal in 2020 face heightened risk. The breach occurred during a period when many families were adjusting support arrangements due to pandemic-related custody changes, meaning fresh financial data was being processed and stored. If you accessed any of these programs through your CRA My Account between the breach period, your family’s financial picture may have been exposed, making it critical to file a claim and monitor your accounts for suspicious activity.
Why This Matters for Separated and Divorced Parents
Separated and divorced parents face heightened risks from the 2020 CRA breach because your financial information directly determines custody-related obligations and benefit entitlements. When hackers accessed CRA portal accounts, they potentially compromised tax data that courts and enforcement agencies use to calculate child support payments, verify benefit eligibility for programs like the Canada Child Benefit, and assess each parent’s financial capacity during custody proceedings.
The exposure of this sensitive financial information creates several specific vulnerabilities for co-parents. Your income details, benefit amounts, and tax filing status could be used to challenge existing support arrangements or question your reported financial situation during custody negotiations. If you receive the Canada Child Benefit or split it with your co-parent, the compromised data may include information about your shared custody arrangement and how benefits are divided between households.
Financial transparency is already a pressure point in many custody arrangements, and this breach adds another layer of concern. Courts require accurate income disclosure for support calculations, and any suggestion that your financial information has been altered or accessed improperly could complicate proceedings. Parents who share custody and split benefits need to ensure both accounts are secure, as a breach affecting one parent’s CRA My Account could expose information about the other’s financial situation through linked benefit claims.
The stakes are particularly high because avoiding child support mistakes often depends on maintaining clear, accurate financial records. Compromised tax data undermines that foundation, potentially affecting everything from benefit recalculations to enforcement actions. If you’re in active custody or support proceedings, or if you’re planning to modify an existing arrangement, this breach means you need to verify that the financial information courts and agencies are working from hasn’t been tampered with or exposed to unauthorized access.
How to File Your Claim and Protect Your Family’s Information
Filing your claim is straightforward, but the February 3, 2027 deadline means you need to act now. Visit the KPMG claims portal at the official settlement website and complete the online form. You’ll need your social insurance number and details about your CRA My Account access during 2020. The process takes about 15 minutes if you have your information ready.
For separated and divorced parents, each co-parent who had a CRA account potentially affected by the breach should file their own claim. If you both received Canada Child Benefit payments or used the My Account portal in 2020, you’re both potentially eligible for compensation. Don’t assume that because your ex-partner filed, your claim is covered.
Gather documentation showing your CRA account activity from 2020. This includes any notifications you received about suspicious account access, password reset emails, or benefit statements. If you include child support calculations in your annual tax filings, print copies of those returns as proof of the sensitive family financial information potentially exposed.
Secure your account immediately by changing your CRA My Account password. Choose a unique password you don’t use anywhere else, enable two-factor authentication if available, and set up email or text alerts for any account changes. Review your recent benefit payments and notice of assessment documents for anything unusual.
Check your credit report through Equifax or TransUnited Canada. Identity thieves sometimes use stolen tax information to open fraudulent accounts. If you share custody and alternate claiming children on tax returns, both parents should monitor their credit, as hackers may have accessed filing information showing your parenting arrangement and dependent claims.
Document everything. Keep copies of your claim submission, confirmation emails, and any correspondence about the breach. This creates a paper trail if identity issues arise later.
What to Watch: Next Steps and Ongoing Concerns
Beyond filing your claim, several developments warrant your attention as this situation evolves. The claims deadline of February 3, 2027 remains firm, but government response to this breach may reshape how family benefits are administered and protected going forward.
Watch for announcements from the CRA about enhanced security measures for My Account access. Given the sensitivity of data like Canada Child Benefit calculations and custody-related tax information, any strengthened authentication requirements could affect how quickly you access benefit statements needed for child support reviews or family court proceedings.
Parents navigating custody arrangements should monitor whether this breach influences family law practices. Some lawyers and mediators may begin requiring additional verification steps when parties present CRA benefit statements as evidence of income or child-rearing expenses. The breach underscores existing concerns about financial transparency in shared parenting situations.
Broader policy updates 2026 affecting families suggest government data handling will face increased scrutiny. How the Treasury Board addresses data security for programs serving separated parents could influence future benefit administration, particularly where both parents maintain separate CRA accounts accessing shared child information.
Check the KPMG claims portal periodically for updates, and ensure both co-parents are aware of the deadline if you both maintain individual CRA accounts. Missing the February deadline means forfeiting your right to compensation, and no extensions have been announced.
The February 3, 2027 deadline isn’t just another administrative date, it’s your opportunity to seek compensation for a breach that may have exposed your family’s most sensitive financial information. If you received Canada Child Benefit or filed custody-related tax information in 2020, taking action now protects both your financial interests and your children’s security. We know you’re already balancing court dates, support calculations, and the daily demands of co-parenting. Adding a data breach claim to that list feels overwhelming, but filing through KPMG takes less time than you’d think, and it ensures you won’t lose the chance to be compensated.
How do I know if I’m eligible for compensation?
If you had a CRA My Account in 2020 and received a notification from the CRA about unauthorized access, or if you’re unsure, you can file a claim through KPMG, they’ll determine eligibility based on the class definition.
Will filing a claim affect my current Canada Child Benefit payments?
No. Filing a compensation claim is separate from your ongoing benefit entitlement and won’t impact your current or future CCB payments or child support arrangements.
What if I’m not sure whether my account was accessed?
File a claim anyway before the deadline. KPMG will verify whether your information was compromised during the 2020 breach, and there’s no penalty for filing if you turn out to be ineligible.
Organizations like Canada Parents Organisation advocate for transparency and accountability in systems that affect families, and this breach underscores why that work matters. Share this information with your co-parent, your support network, and other separated parents who may not realize they’re affected. Protecting your family’s data is part of protecting your family’s future, you’ve earned the right to that compensation.