Canada — Cyber Threat Profile
Canada maintains a highly mature cybersecurity ecosystem supported by advanced national legislation, alliance integration, and strong institutional coordination. Strategic priorities include protection of critical infrastructure, defense networks, financial systems, and research institutions. The country faces persistent targeting from sophisticated state-sponsored actors seeking geopolitical, technological, and defense intelligence. Federal cyber authorities coordinate national resilience through intelligence sharing, public-private partnerships, and cyber workforce development initiatives. Canada's integration within Five Eyes intelligence frameworks significantly enhances its cyber defense posture.- National CERT/CSIRT: CCCS
- Data protection authority: Commissariat à la protection de la vie privée du Canada (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 1.34 / 100, #25 worldwide
- Secure Internet servers per 1M people (2024): 39,738 (source: World Bank)
- Internet users (2024): 94.4% of population (source: World Bank)
Latest Canada coverage
- Ransomware crew says it stole 51,409 Air Canada files 2026-09-10 · Ransomware
- Icarus extortion crew breaches Klue and steals customer Salesforce data 2026-06-22 · Cyber Incidents
Threat actors targeting Canada
- APT29 APT
- Lazarus Group APT
- MuddyWater APT
- NoName057(16) Hacktivist
- Salt Typhoon APT
- ZIRCONIUM APT
- Qilin Ransomware · 106 incident(s)
- Akira Ransomware · 76 incident(s)
- Play Ransomware Ransomware · 74 incident(s)
- INC Ransom Ransomware · 56 incident(s)
- Cl0p Ransomware · 50 incident(s)
- RansomHub Ransomware · 34 incident(s)
- SafePay Ransomware · 32 incident(s)
- Medusa Ransomware Ransomware · 31 incident(s)
- The Gentlemen Ransomware · 25 incident(s)
- DragonForce Ransomware · 22 incident(s)
- Lynx Ransomware Ransomware · 21 incident(s)
- Rhysida Ransomware · 20 incident(s)
- Hunters International Ransomware · 15 incident(s)
- LockBit Ransomware · 15 incident(s)
- Black Basta Ransomware · 13 incident(s)
- Sarcoma Ransomware · 13 incident(s)
- ALPHV/BlackCat Ransomware · 11 incident(s)
- Cactus Ransomware · 11 incident(s)
- Storm Ransomware · 10 incident(s)
- Brain Cipher Ransomware · 8 incident(s)
- BianLian Ransomware · 7 incident(s)
- BlackSuit Ransomware · 7 incident(s)
- Meow Ransomware · 7 incident(s)
- Chaos Ransomware · 5 incident(s)
- CMD Ransomware · 5 incident(s)
- KillSec Ransomware · 5 incident(s)
- M3rx Ransomware · 5 incident(s)
- 8Base Ransomware · 4 incident(s)
- BlackNevas Ransomware · 4 incident(s)
- Fog Ransomware Ransomware · 4 incident(s)
- Arcus Media Ransomware · 3 incident(s)
- Coinbase Cartel Ransomware · 3 incident(s)
- MedusaLocker Ransomware · 3 incident(s)
- N0n Ransomware · 3 incident(s)
Most targeted sectors
- Manufacturing 128 incident(s)
- Business & Professional Services 126 incident(s)
- Technology 77 incident(s)
- Retail & Consumer 55 incident(s)
- Transportation & Logistics 52 incident(s)
- Agriculture & Food 46 incident(s)
- Healthcare 44 incident(s)
- Financial Services 39 incident(s)
- Construction 35 incident(s)
- Energy & Utilities 31 incident(s)
- Government & Public Sector 30 incident(s)
- Education & Research 24 incident(s)
Recent claimed incidents
- bereskinparr.com smartbiggar.ca 2026-10-22 · Professional Services
- OpenText 2026-10-20 · Technology
- GardaWorld 2026-10-19 · Government & Defense
- CAS Paper Mill 2026-10-16 · Manufacturing
- ServiceMaster of Ottawa 2026-10-16 · Professional Services
- Shediac Lobster Shop 2026-10-14 · Retail & E-Commerce
- YYC Advisors 2026-10-13 · Financial Services
- Canadian Mennonite University (CMU) 2026-10-12 · Education
- hsc.mb.ca 2026-10-11 · Healthcare
- Company #14 2026-10-11
- mblllp 2026-10-09
- Anaergia | World-Leading Anaerobic Digestion Solutions 2026-10-09 · Energy & Utilities
- Saskatoon Tribal Council 2026-10-09 · Government & Defense
- Husky Ltee 2026-10-09 · Other
- Asessippi Ski Resort 2026-10-09 · Hospitality