Canada — Cyber Threat Profile
Canada maintains a highly mature cybersecurity ecosystem supported by advanced national legislation, alliance integration, and strong institutional coordination. Strategic priorities include protection of critical infrastructure, defense networks, financial systems, and research institutions. The country faces persistent targeting from sophisticated state-sponsored actors seeking geopolitical, technological, and defense intelligence. Federal cyber authorities coordinate national resilience through intelligence sharing, public-private partnerships, and cyber workforce development initiatives. Canada's integration within Five Eyes intelligence frameworks significantly enhances its cyber defense posture.- National CERT/CSIRT: CCCS
- Data protection authority: Commissariat à la protection de la vie privée du Canada (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 1.34 / 100, #25 worldwide
- Secure Internet servers per 1M people (2024): 39,738 (source: World Bank)
- Internet users (2024): 94.4% of population (source: World Bank)
Latest Canada coverage
- Icarus extortion crew breaches Klue and steals customer Salesforce data 2026-06-22 · Cyber Incidents
Threat actors targeting Canada
- APT29 APT
- Lazarus Group APT
- MuddyWater APT
- NoName057(16) Hacktivist
- Salt Typhoon APT
- ZIRCONIUM APT
- Qilin Ransomware · 102 incident(s)
- Akira Ransomware · 74 incident(s)
- Play Ransomware Ransomware · 72 incident(s)
- INC Ransom Ransomware · 54 incident(s)
- Cl0p Ransomware · 48 incident(s)
- RansomHub Ransomware · 34 incident(s)
- SafePay Ransomware · 32 incident(s)
- Medusa Ransomware Ransomware · 31 incident(s)
- DragonForce Ransomware · 21 incident(s)
- Lynx Ransomware Ransomware · 21 incident(s)
- Rhysida Ransomware · 20 incident(s)
- Hunters International Ransomware · 15 incident(s)
- LockBit Ransomware · 15 incident(s)
- The Gentlemen Ransomware · 15 incident(s)
- Black Basta Ransomware · 13 incident(s)
- Sarcoma Ransomware · 13 incident(s)
- ALPHV/BlackCat Ransomware · 11 incident(s)
- Cactus Ransomware · 11 incident(s)
- BianLian Ransomware · 7 incident(s)
- BlackSuit Ransomware · 7 incident(s)
- Brain Cipher Ransomware · 7 incident(s)
- Meow Ransomware · 7 incident(s)
- Chaos Ransomware · 5 incident(s)
- CMD Ransomware · 5 incident(s)
- KillSec Ransomware · 5 incident(s)
- 8Base Ransomware · 4 incident(s)
- BlackNevas Ransomware · 4 incident(s)
- Fog Ransomware Ransomware · 4 incident(s)
- M3rx Ransomware · 4 incident(s)
- Storm Ransomware · 4 incident(s)
- Coinbase Cartel Ransomware · 3 incident(s)
- PEAR Team Ransomware · 3 incident(s)
- RansomHouse Ransomware · 3 incident(s)
- Settra Ransomware · 3 incident(s)
Most targeted sectors
- Business & Professional Services 123 incident(s)
- Manufacturing 119 incident(s)
- Technology 73 incident(s)
- Retail & Consumer 52 incident(s)
- Transportation & Logistics 51 incident(s)
- Agriculture & Food 45 incident(s)
- Healthcare 39 incident(s)
- Financial Services 36 incident(s)
- Construction 35 incident(s)
- Energy & Utilities 29 incident(s)
- Government & Public Sector 28 incident(s)
- Education & Research 22 incident(s)
Recent claimed incidents
- mcnishsteel.com 2026-09-08 · Manufacturing
- MSM Unify: Global Education Platform - CA 2026-09-07 · Education
- EllisDon Corporation 2026-09-07 · Professional Services
- Commission de la construction du Quebec (CCQ) 2026-09-04 · Government & Defense
- Petrocare Construction 2026-09-03 · Energy & Utilities
- Multiver Ltée 2026-09-02
- Commission de la construction du Quebec 2026-09-01 · Government & Defense
- MEQ 2026-08-31
- cfsnow.com 2026-08-31 · Technology
- acqbuilt.com 2026-08-30 · Professional Services
- singleton.com 2026-08-27
- Northern Leasing Systems 2026-08-26 · Financial Services
- Coldfish Seafood 2026-08-24 · Agriculture and Food Production
- Meridian Forest Services 2026-08-24 · Agriculture and Food Production
- Brookview Financial 2026-08-24 · Financial Services