Campeau v Her Majesty the Queen

CRA Privacy Breach Class Action

Murphy Battista LLP has filed a proposed class proceeding related to the unauthorized disclosure to a third party of the personal and financial information of thousands of Canadians from their online accounts with the Government of Canada Branded Credential Service (“GCKey”) and the Canada Revenue Agency (“CRA”).

The information was disclosed to a third party during several cyber security incidents targeting GCKey and CRA accounts. The plaintiffs allege that the defendant was aware of cyber security concerns and was aware of vulnerabilities in its security software, both of which put at risk the personal and financial information contained in Class Members’ GCKey and CRA accounts. Despite these concerns and vulnerabilities, the defendant failed to take reasonable steps and precautions to prevent harm to Class Members.

Who does the class action affect?

The claim is brought on behalf of all persons whose personal or financial information in their Government of Canada Branded Credential Service account or their Canada Revenue Agency account was disclosed to a third party on or after March 15, 2020 (“Class” or “Class Members” to be further defined on the plaintiffs’ application for certification).

Current Status

A certification hearing in this matter will take place from December 13-15, 2021. Please check back here for updates.


For information about this class action you can email [email protected] or call Murphy Battista’s Vancouver office at (604) 683-9621 or Toll Free at 1-844-633-3817, and ask to speak to a member of the legal team handling the CRA Privacy Breach Class Action. Reception will transfer your call to someone who can help you.

Who are the lawyers?

A team of lawyers at Murphy Battista LLP, led by Angela Bespflug and Janelle O’Connor, are pursuing this action.

What should I do if I have been impacted?

Please fill out the form at the bottom of this page and we will contact you.

News Articles:



In the News

Impact of the CRA Privacy Breach Starts to Emerge as Tax Season Begins

March 22, 2021

Repercussions continue for Canadians affected by the privacy breaches to their CRA accounts. While some individuals have had their identities stolen, others are now receiving T4s from the CRA for CERB benefits they never applied for or received. Read the full CRA privacy breach story: Months after identity theft detected,…

Continue Reading

Angela Bespflug quoted on class action filed regarding CRA Privacy Breach – CBC News

August 31, 2020

Read the latest from CBC news on the CRA privacy breach in this news article from Eric Rankin: CRA’s handling of COVID-19 benefit cyberattacks ‘reprehensible,’ alleges proposed class-action lawsuit If you have been affected, learn more here: CRA Privacy Breach Class Action

Continue Reading

Canadian Underwriter magazine reports on CRA data breach class action.

September 4, 2020

Canadian Underwriter magazine provides a review of the proposed class action filed August 24, 2020 by Murphy Battista LLP class action lawyers Angela Bespflug and Janelle O’Connor. The class action involves the fallout of cyberattacks on CRA and GCKey accounts earlier in the year that resulted in the disclosure of…

Continue Reading

CRA cyberattacks ramifications not yet fully known.

September 3, 2020

HuffPost Canada article about the proposed class action on behalf of Canadians whose personal or financial information in GCKey or Canada Revenue Agency accounts were disclosed to a third party on or after March 15, 2020. The article includes an interview with representative plaintiff Anne Campeau who explains what occurred…

Continue Reading


CRA Breach Class Action Form

  • Personal information that you provide to us for the purpose of determining your possible involvement in the class action will be treated as private. Read our privacy policy for more information.

    Please fill out the online form below and someone from our office will contact you to go through your details.

    You can use the "Save and Continue Later" option (at the bottom of the page) if you need to finish filling it out at another time.

    Alternatively, download a fillable PDF form, fill it out using a PDF reader software such as Adobe Acrobat Reader and email it to [email protected] with the subject line: CRA Privacy Breach.

    Please note you will need an internet connection to submit the form.

  • This field is for validation purposes and should be left unchanged.