Given that our investigation, once we were informed by CRA of the incident involving our e-file credentials.... We commenced our investigation immediately after learning about it. We went through a comprehensive investigative process, and its conclusion pointed to no evidence of any breach of our systems, software or security apparatuses at H&R Block Canada. As a result, there was no requirement or basis for us to report anything to the Privacy Commissioner.
On December 12th, 2024. See this statement in context.