Judge Certifies Lawsuit Alleging CRA Allowed Hackers to Breach Thousands of Online Taxpayer Accounts

Judge Certifies Lawsuit Alleging CRA Allowed Hackers to Breach Thousands of Online Taxpayer Accounts
The Canada Revenue Agency (CRA) headquarters Connaught Building is pictured in Ottawa on Aug. 17, 2020. Sean Kilpatrick/The Canadian Press
Peter Wilson
Updated:

A federal judge has certified a class action lawsuit alleging that the Canada Revenue Agency (CRA) allowed thousands of taxpayer identities to be breached by hackers, who then used the information to illegally collect Canada Emergency Response Benefit (CERB) payments.

Based on the accusations of the case’s plaintiff, BC resident Todd Sweet, federal judge Richard Southcott wrote it appears that thousands of Canadians “were vulnerable to hackers from approximately June to August of 2020” because the CRA allegedly was dealing with “operational failures” that prevented it from securing online taxpayer portals.