Court Approves $35 Million Capital One Breach Settlement

The Supreme Court of British Columbia cleared a class action deal for millions of Canadians affected by a 2019 data breach.

Updated on Oct. 23, 2026 in Cybersecurity

Isometric editorial illustration showing a geometric steel vault door embedded in a concrete structure, representing the legal settlement of financial data. — The Supreme Court of British Columbia has approved a $35-million class action settlement to compensate Canadian Capital One customers for a 2019 data breach. AI Illustration. Upload story photo >

Live Poll

Is a $35-million settlement sufficient compensation for customers after a major data breach?

The Supreme Court of British Columbia has approved a $35-million class action settlement regarding a 2019 data breach at Capital One Financial Corp. The deal provides approximately $24.5 million in total compensation to Canadian customers impacted by the security failure.

Why it matters

The court determined the settlement is a fair resolution compared to the risks inherent in proceeding to trial litigation. This move compensates individuals for mitigation costs and inconvenience stemming from the exposure of sensitive financial records.

The settlement covers six million Canadians whose data was compromised during a 2019 breach, including one million individuals whose social insurance numbers were exposed. Payouts range from $250 to $325 per claimant, with remaining funds potentially increasing individual recoveries to a maximum of $750.

The players

Capital One Financial Corp.

This American bank holding company specializes in credit cards, auto loans, and savings accounts.

Supreme Court of British Columbia

This is the superior trial court of the Canadian province of British Columbia with jurisdiction over civil and criminal matters.

The details

The settlement applies to applicants for Capital One credit cards between 2005 and 2019, though it specifically excludes Quebec residents. Eligible members may submit claims for mitigation costs, credit monitoring fees, and time spent addressing the breach.

The affected credit card applications occurred between 2005 and 2019.
The data breach occurred in 2019, when the lawsuit was also initiated.
The court certified the case as a class action in mid-2022.
The Supreme Court of British Columbia approved the settlement on October 23, 2026.

The Tech Race

This settlement follows the pattern set by the 2019 Capital One data breach, which serves as a major reference point for corporate liability in Canadian cybersecurity litigation. It highlights the shifting landscape where financial institutions are increasingly held accountable for long-term security failures impacting millions of consumers.

Canadian credit card applicants from the 2005-2019 period should determine their eligibility for compensation based on whether their social insurance number was included in the breach. Those who qualify can recover costs associated with identity theft protection and time spent managing the impact of the data exposure.

The takeaway

Affected individuals should verify their status in the class to access potential compensation tiers ranging from $250 to $750. Monitoring personal financial statements remains a critical practice for anyone previously identified in large-scale data compromises.