Canada Government Statement: Sweet v. King Settlement
- The Government of Canada,like organizations globally,continually faces evolving cybersecurity threats.
- These attacks prompted a class action lawsuit against the CRA and the Government of Canada. The Federal Court certified the class action, known as Sweet c.
- On October 26, 2025, the parties involved reached a proposed settlement agreement.A hearing to seek court approval of this settlement is scheduled for March 31, 2026, before the...
Proposed Settlement Reached in Class Action Lawsuit Regarding GCKey and CRA Account Security
Background on the Security Incident
The Government of Canada,like organizations globally,continually faces evolving cybersecurity threats. In August 2020, the government responded to credential stuffing attacks targeting the GCKey service and accounts at the Canada Revenue Agency (CRA).
These attacks prompted a class action lawsuit against the CRA and the Government of Canada. The Federal Court certified the class action, known as Sweet c. His Majesty the King, in August 2022.
Settlement Agreement and court Approval
On October 26, 2025, the parties involved reached a proposed settlement agreement.A hearing to seek court approval of this settlement is scheduled for March 31, 2026, before the Federal Court.
Individuals possibly affected by the security incidents have been notified directly and through information published on the Canada.ca website. This website provides details about the class action and the process for opting out.
Further Information and Contact Details
Detailed information regarding the proposed settlement, the approval hearing, and a second opt-out period is available on the Canada.ca website dedicated to the Sweet c. His Majesty the king class action.
For specific questions,individuals can contact Class counsel directly at classactions@rhelaw.com.