Canada’s Critical Infrastructure Under Cyberattack

The canadian government has identified that its critical infrastructure is facing a growing threat from cybercriminals. Disruptions to these systems, caused by malicious cyber activity, can result in service outages, economic losses, and pose meaningful risks to public health and safety. As cyber threats against critical infrastructure become more frequent and complex, criminals are increasingly using advanced tools, including ransomware-as-a-service (RaaS) and artificial intelligence (AI), to escalate their extortion tactics.

“Malicious cyber activity targeting Canada’s critical infrastructure-like power, water, health, finance and transportation-is on the rise and is a real and urgent threat,” David McGuinty, Minister of National Defense, and Gary Anandasangaree, Minister of Public Safety, noted in a statement last week. “These malicious activities are conducted by both cyber threat actors with ties to nation states and non-state actors and can disrupt essential services Canadians rely on every day. Any disruption to critical infrastructure isn’t just a threat to public health and safety,but also a threat to public confidence,the environment,and the economy.”

They outlined that state-sponsored cyber actors can target Canada’s critical infrastructure, positioning themselves to disrupt or destroy critical services in times of crisis or conflict. Cybercriminals and other non-state cyber actors continue to target critical infrastructure for financial gain, to support geopolitical or ideological interests, or for personal reasons, such as acts of revenge by disgruntled former employees or customers.

Identifying this as a call to be ready, McGuinty and Anandasangaree noted that too frequently enough, antagonistic hackers gain access to critical infrastructure through weaknesses that are preventable.”We urge all critical infrastructure operators in Canada, particularly municipalities and private enterprises, to be vigilant and take immediate action to strengthen their defences. Adopt best practices in cyber security, like the Cyber Center’s Cyber Security Readiness Goals and secure-by-design principles. Report incidents promptly and work closely with government agencies to prevent an