Canada Archives - ICSSTRIVE

Third-Party Attack Hits Nissan

June 26, 2026

There was another incident related to the Oracle PeopleSoft software where attackers were able to steal the personnel records of hundreds of companies of which Nissan was the latest to report former and current employees ended up victimized.
“We have since learned that Nissan was specifically targeted in this attack,” according to an advisory dated Friday, June 26. “Upon learning about this issue, we quickly activated incident response protocols. We have been in communication with authorities throughout our response to this attack. Our technical teams, along with external experts, have secured our systems and will continue to work with Oracle to address this issue.”
Oracle’s PeopleSoft program manages employee records, payroll, and other personal data and in this case attackers were able to exfiltrate data accessed on Nissan’s systems.

Canadian Cyber Centre Warns of Hacktivists Abusing Internet‑Accessible Industrial Control Systems

October 29, 2025

Multiple incidents have been reported in Canada where internet‑accessible industrial control systems (ICS) have been manipulated by opportunistic actors (hacktivists). Attackers altered water pressure values at a water treatment facility, resulting in degraded service for the community. An Automated Tank Gauge (ATG) was manipulated at an oil and gas company, triggering false alarms. Temperature and humidity values were manipulated at a farm grain silo, potentially leading to unsafe conditions if not discovered in time.

Unauthorized Messages Broadcast After Airport Display and PA System Breach at Multiple North American Airports

October 15, 2025

A cybersecurity breach affecting airport terminal systems occurred at multiple airports in Canada and the United States. The unauthorized actors gained access to public information display screens and public address (PA) systems, broadcasting pro‑Hamas and anti‑Trump/anti‑Israeli messages. Some flights at Kelowna were delayed as a result of the incident. Other airports reported little to no impact on scheduled flights or passenger safety. Normal operations resumed swiftly after systems were restored.

A group calling itself “Siberislam” claimed responsibility for the hacks in the onscreen messages, while social media accounts under that name shared videos of the incidents.

Ransomware Attack Disrupts Operations at Canadian Food Distributor, Colabor Group

July 20, 2025

A cyberattack disrupted Colabor Group’s internal IT systems, halting automated order processing, warehouse and logistics operations, and delivery scheduling for several days. Manual workarounds allowed partial continuity, with full operational restoration by early August 2025. Employee data exposure prompted precautionary compliance measures.

Akira ransomware group is reported by some news outlets to have claimed the attack, unconfirmed by Colabor.

Cyberattack at Food Producer, Vero Foods

December 2, 2024

Calgary, Canada-based food producer, Vero Foods, suffered a cyberattack where threat actors were able to gain access to email files that contained personally identifiable information.
“On December 6, 2024, Vero Foods became aware of suspicious activity within their environment,” the company said in a letter to victims. “We promptly took steps to secure our network and launched an investigation. The investigation determined that certain email files were accessed without authorization by an unknown actor between December 2, 2024, and December 7, 2024.”
As a result of the attack, Vero Foods did say it has no evidence of any identity theft or fraud occurring in connection with this incident. Vero Foods conducted a review of relevant systems and notified those whose information was present within the systems. The company just completed that review.

Cyberattack at Canadian Airline, WestJet

June 13, 2025

Calgary, Canada-based low-cost airline, WestJet, said it suffered a cybersecurity breach affecting its internal systems and its app.
“WestJet is aware of a cybersecurity incident involving internal systems and the WestJet app, which has restricted access for several users, the airline said when they first found out about the incident on Friday (June 13). “We have activated specialized internal teams in co-operation with law enforcement and Transport Canada to investigate the matter and limit impacts.”
The company added, “our operation is running safely and remains unaffected by the current situation at this time. We are actively working to understand the extent of impact and have expedited resolution efforts.”

Cyber incident at Calgary based Airline Westjet

June 14, 2025

WestJet, Canada’s second-largest airline, suffered a cyberattack disrupting access to some internal systems. “WestJet is aware of a cybersecurity incident involving internal systems and the WestJet app, which has restricted access for several users,” reads a security advisory on WestJet’s site. The attack also prevented users from logging into the website and mobile app, with those services now restored. The attack has impacted access to some of its software and services. It is unclear if the loss of access to its systems is caused by a ransomware attack that encrypted those devices or if they shut them to prevent the spread of the breach.

Packaging Manufacturer in Canada Resumes Normal Operations Month after Cyberattack

February 21, 2025

On February 21, 2025, Imaflex packaging company announced they suffered a cybersecurity attack. The incident disrupted Imaflex’ systems and operations. The company says it immediately took steps to contain and mitigate any potential impact. Manufacture -, ship – and perform back-office functions continued as required with temporary workarounds.

On March 27 Imaflex confirmed “all systems and data have been fully restored, and operations have returned to normal”.

Ransomware Attack at Canadian Chocolate Manufacturer Disrupts Operations

February 22, 2025

Ganong Bros., a Canadian sweets manufacturer based in St. Stephen, New Brunswick, was hit by a ransomware attack. The company discovered the incident on February 22, 2025. Operations at the facility in St. Stephen were temporarily disrupted. Ganong immediately engaged third-party cybersecurity experts and legal counsel.

The PLAY ransomware group claimed responsibility for the attack. Ganong has acknowledged the “IT security incident,” and declined to comment on whether a ransom was demanded or paid.

Extensive Databreach fully Exposes Qualinet’s Operation Methods

January 10, 2025

The Qualinet Group suffered a ransomware attack on January 10. The company deployed its emergency plan and mobilized a team of specialists to identify the extent of the attack. The Rhysida group claimed the attack. The hackers infiltrated the servers and stole 1.5 million files. Qualinet refused to pay the ransom of seven bitcoins ($870,000) in exchange for its 1.2 terabyte treasure trove of data. Since January 28, all files can be downloaded via Tor software from Rhysida’s website. The site exposes company data, including its operating methods, canadian passports and Quebec driver’s licenses.

Qualinet operates primarily in the disaster restoration and cleaning services industry and is based in Quebec, Canada.

« Older Entries