Canada
Primarily a target
—
30 received·
0 initiated·
12 responses
·NATO
This year to date, 30 new cyber operations involving Canada were added to the database: a 7% increase compared to the previous period. The number of operations is currently 7% below the long-term year-to-date average. The Intensity of cyber operations involving Canada over this year to date is declining to 3.6, compared with 3.9 in the same elapsed span of the previous year. This is above the all-time average for Canada of 2.9.
Maintained by EuRepoC research analysts · updated 16 Oct 2026
For this year to date, this country appears chiefly as a target — 30 incidents directed at it, 0 it is linked to initiating.
Source: EuRepoC Global Database as of 16 Oct 2026.
01 / 02
30 incidents · as targetCyber activity
Incidents directed at Canada targets, and the responses they drew.
Cyber incident intensity
Mean3.7/15Moderate
Range 1.0–8.0
Drag the ends of the observed range to narrow intensities.
29 coded incidents · This year to date
Database additions by monthincidents against Canada
Bar height shows incidents added during this year to date; select a bar to filter this interval; hover for average intensity.
Most-targeted sectorswhat gets hit
SectorIncidentsIntensityResponded
Civil service / administration
3.5Moderate
3/10
Education
3.8Moderate
2/8
Corporate Targets
3.7Moderate
2/7
Health
3.9Moderate
3/7
Government / ministries
3.2Moderate
2/6
Finance
3.4Moderate
1/5
Defence industry
3.8Moderate
2/4
Energy
3.0Moderate
2/4
Civil service / administration is the most-targeted sector — 10 of 30 incidents, 3 answered.
02 / 02
Incidents received & responses
AUUSJPDE4 statesjoint
WaterPlum
Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026
Official policy
18 Sep 2026
Official policy
18 Sep 2026
AUUSJPDE4 states
WaterPlum
Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026
Qilin Ransomware Group
Canada
·Civil service / administration
Qilin Ransomware Group Launched Ransomware Attack on Quebec Construction Commission in Canada on 24 August 2026
24 Aug 2026
Incident · Moderate severity
24 Aug 2026
Qilin Ransomware Group
Canada
·Civil service / administration
Qilin Ransomware Group Launched Ransomware Attack on Quebec Construction Commission in Canada on 24 August 2026
USFederal Bureau of Investigation
Mabna Institute
US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026
Criminal proceedings
18 Aug 2026
Criminal proceedings
18 Aug 2026
USFederal Bureau of Investigation
Mabna Institute
US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026
Unknown
Canada
·Health
Unattributed Hackers Stole Employee Data from Hospital for Sick Children in Canada in August 2026
1 Aug 2026
Incident · Unattributed
1 Aug 2026
Unknown
Canada
·Health
Unattributed Hackers Stole Employee Data from Hospital for Sick Children in Canada in August 2026
Unknown
Canada
·Health
Unknown Threat Actor Conducted Ransomware Attack on Health Sciences Centre in Canada in August 2026
1 Aug 2026
Incident · Unattributed
1 Aug 2026
Unknown
Canada
·Health
Unknown Threat Actor Conducted Ransomware Attack on Health Sciences Centre in Canada in August 2026
Cyber Army of Russia Reborn, CARR (GRU)
Canada
·Civil service / administration +1
Russian Hacker Group Hijacked Drinking Water Plant In Saint-Noël, Canada On 23 July 2026
23 Jul 2026
Incident · Low severity
23 Jul 2026
Cyber Army of Russia Reborn, CARR (GRU)
Canada
·Civil service / administration +1
Russian Hacker Group Hijacked Drinking Water Plant In Saint-Noël, Canada On 23 July 2026
CACZFRNZ+1216 statesjoint
LAUNDRY BEAR (Russian Federation)
International Partners Issued Joint Cybersecurity Advisory Warning of Russian State-Supported Laundry Bear's Phishing Campaign Targeting Zimbra Collaboration Suite Users on 23 July 2026
Technical disclosure
23 Jul 2026
Technical disclosure
23 Jul 2026
CACZFRNZ+1216 states
LAUNDRY BEAR (Russian Federation)
International Partners Issued Joint Cybersecurity Advisory Warning of Russian State-Supported Laundry Bear's Phishing Campaign Targeting Zimbra Collaboration Suite Users on 23 July 2026
NLNetherlands Defence Intelligence and Security Service
one Russian intelligence and security se… (Russian Federation)
Dutch AIVD and MIVD Issued a Cybersecurity Advisory Related to Russian State Actors Compromising IP Cameras in Europe for Military Purposes , 10 July 2026
Official policy
10 Jul 2026
Official policy
10 Jul 2026
NLNetherlands Defence Intelligence and Security Service
one Russian intelligence and security se… (Russian Federation)
Dutch AIVD and MIVD Issued a Cybersecurity Advisory Related to Russian State Actors Compromising IP Cameras in Europe for Military Purposes , 10 July 2026
Showing the 8 most recent of 42
Open all in advanced search