Cyberattacks in Canada: alerts regarding its critical ICS -

Canada is currently facing an alarming rise in cyberattacks targeting critical infrastructure. According to the Canadian Centre for Cyber Security (Cyber Centre), hacktivists have recently exploited internet-connected industrial control systems (ICS) at water treatment plants, energy facilities, and farms. These attacks demonstrate the vulnerability of key equipment, such as PLCs (Programmable Logic Controllers), SCADA systems, and RTUs (Remote Transfer Units), and underscore the urgent need to enhance the digital resilience of national infrastructure.

1. What cyberattacks in Canada have recently targeted critical infrastructure?

In its alert “AL25-016” published on October 29, 2025, the Cyber Centre reported multiple attacks on Internet-connected industrial control systems (ICS). One incident affected a water treatment facility. Hackers manipulated water pressure, temporarily disrupting service for the local community.

Another case involved a major oil company. Attackers tampered with an Automated Tank Gauge (ATG), triggering false alarms and raising operational concerns. Finally, intruders altered temperature and humidity readings in a grain-drying silo. If the attack had gone undetected, it could have created dangerous conditions for stored agricultural products.

Authorities say these actions do not appear to be sophisticated espionage. Instead, they seem opportunistic. Hacktivists seek media attention, aim to discredit organizations, and try to damage Canada’s reputation.

2. How were these cyberattacks able to bypass security systems?

Successfully hacking these infrastructures was made possible by several vulnerabilities. First, industrial systems, some of which are old, are still connected to the internet. They have limited security measures, giving hackers easier access to these networks. Second, some platforms used weak and widely shared passwords, making them easy targets for breaches.

Furthermore, some online services were not kept up to date, and these various elements constitute invisible but exploitable entry points for malicious groups. In addition, many municipalities lack sufficient technical resources and are unable to properly monitor their networks, allowing hackers to take advantage of these gaps in vigilance.

Finally, sometimes simple human errors exacerbated the risks, such as employees clicking on malicious attachments, thus enabling the installation of new tools that bypass existing security measures. These attacks demonstrate the urgent need for security improvements.

3. What responses is Canada providing to counter these cyberattacks in Canada?

Faced with this threat, the Cyber Centre urges organizations to take urgent measures. They should first create a full inventory of all internet-exposed ICS equipment. Organizations must then assess each system to determine if it truly needs external access. If they cannot eliminate direct access, they must implement more secure solutions, such as VPNs with two-factor authentication (2FA). These steps limit potential entry points for attackers.

The Centre also stresses that organizations need robust detection mechanisms. They should deploy IPS firewalls, perform regular penetration tests, and manage vulnerabilities continuously. Furthermore, the Centre recommends tabletop exercises. These exercises let stakeholders—including municipalities, operators, and authorities—clarify roles and coordinate their response to an attack. Finally, the Cyber Centre calls for stronger cooperation across all levels. Provincial, territorial, and municipal governments must partner with private operators to secure critical infrastructure, especially in sectors like water and agriculture, which often have limited cybersecurity rules.

The cyberattack incidents experienced by Canada reveal critical infrastructure vulnerabilities, while recent events demonstrate that threats are evolving and becoming more sophisticated. The country must optimize its protection systems and tools, and train its teams, as this is the only way Canada can reduce risks and better protect its essential services.