Canada Archives - AboutDFIR - The Definitive Compendium Project

20 Jan 2026

InfoSec News Nuggets – 01/20/2026

Canada's Investment Regulator Confirms Data Breach Affecting 750,000 Investors The Canadian Investment Regulatory Organization (CIRO) has confirmed that a sophisticated phishing attack it suffered in August 2025 impacted approximately 750,000 Canadian investors. After more than 9,000 hours of forensic investigation, CIRO disclosed that the compromised data includes dates of birth, phone numbers, annual income, social insurance numbers, government-issued ID numbers, investment account numbers, and account statements. CEO Andrew Kriegler said the complexity of the cyberattack…

01 Oct 2025

By Mary

InfoSec News Nuggets 10/01/2025

Canadian Airline WestJet Says Hackers Stole Customer Data Canadian airline WestJet this week confirmed that customer personal information was stolen in a June 2025 cyberattack. The incident, disclosed on June 13, involved unauthorized access to several internal systems and impacted the availability of WestJet’s application and website. The airline’s operations were not affected by the attack, and WestJet restored access to its application and website roughly two days after the incident. In July, WestJet said the incident had been…

30 Jun 2025

By Mary

InfoSec News Nuggets 6/30/2025

Update: Hawaiian Airlines cyberattack has marks of Scattered Spider, sources say Multiple incident responders said a cyberattack on Hawaiian Airlines is likely the work of cybercriminal group Scattered Spider. The airline first reported the incident Thursday morning, assuring customers that although the attack took down some IT systems, it was still able to safely operate a full flight schedule and was “working toward an orderly restoration.” The Federal Aviation Administration told Reuters it was assisting the airline to ensure…

15 May 2025

By Mary

InfoSec News Nuggets 5/15/2025

CISA Planned to Kill .Gov Alerts, Then It Reversed Course The United States' top cyber defense agency reversed a decision Tuesday to stop posting cybersecurity alerts and guidance on its website after announcing 24 hours earlier that it would favor the X social media platform. The Cybersecurity and Infrastructure Security Agency said Monday it planned to scale back the steady stream of alerts posted to its cybersecurity advisories webpage, refocusing the site on "urgent information tied to…

31 Mar 2025

By Mary

InfoSec News Nuggets 3/31/2025

Oracle Health breach compromises patient data at US hospitals A breach at Oracle Health impacts multiple US healthcare organizations and hospitals after a threat actor stole patient data from legacy servers. Oracle Health has not yet publicly disclosed the incident, but in private communications sent to impacted customers and from conversations with those involved, BleepingComputer confirmed that patient data was stolen in the attack. Oracle Health, formerly known as Cerner, is a healthcare software-as-a-service (SaaS) company…

06 Nov 2024

By Mary

InfoSec News Nuggets 11/06/2024

Cisco notifies ‘limited set’ of customers after hacker accessed non-public files Cisco said it has notified a limited set of customers about files that were accessed by a hacker during an incident announced in October. The tech giant has repeatedly denied that it suffered a breach but said on October 18 its investigation into the incident revealed that a threat actor downloaded data on a public-facing DevHub environment — a platform the company uses to make software code, scripts and…

05 Nov 2024

By Mary

InfoSec News Nuggets 11/05/2024

Chinese APTs Cash In on Years of Edge Device Attacks Chinese threat actors are operating at a higher level today than ever before, thanks to years of trial-and-error-style attacks against mass numbers of edge devices. Networking devices are a known favorite of China's advanced persistent threats (APT), and why wouldn't they be? Sitting on the outer banks of an enterprise network, they not only allow threat actors a way in, they also double as useful nodes for…

21 Nov 2023

By Mary

InfoSec News Nuggets 11/21/2023

Two top Ukrainian cyber officials dismissed amid embezzlement probe Two high-ranking cybersecurity officials in Ukraine were dismissed on Monday, according to a senior government official, amid an investigation into suspected embezzlement of state funds. Yurii Shchyhol, the head of Ukraine’s State Service for Special Communications and Information Protection (SSSCIP), said in a statement that he submitted his resignation from the post early this morning. “I am confident that I will be able to prove my innocence during an…

17 Feb 2022

By Mary

InfoSec News Nuggets 02/17/2022

Russian State-Sponsored Cyber Actors Target Cleared Defense Contractor Networks to Obtain Sensitive U.S. Defense Information and Technology From at least January 2020, through February 2022, the Federal Bureau of Investigation (FBI), National Security Agency (NSA), and Cybersecurity and Infrastructure Security Agency (CISA) have observed regular targeting of U.S. cleared defense contractors (CDCs) by Russian state-sponsored cyber actors. The actors have targeted both large and small CDCs and subcontractors with varying levels of cybersecurity protocols and…

16 Dec 2020

By Mary

InfoSec News Nuggets 12/16/2020

Amazon, TikTok, Facebook, Others Ordered To Explain What They Do With User Data The Federal Trade Commission is demanding that nine social media and tech companies share details on how they harness users' data and what they do with the information. Amazon.com, TikTok owner ByteDance, Discord, Facebook, Reddit, Snap, Twitter, WhatsApp (also owned by Facebook), and YouTube were sent orders by the FTC on Monday to provide the commission with details on their data collection and advertising…

13 Dec 2019

By Mary

InfoSec News Nuggets 12/13/2019

1 - ‘Canadian eyes only’ intelligence reports say Canadian leaders attacked in cyber campaigns Russia is one of the hostile foreign states that has targeted Canada in recent “cyber influence” campaigns, according to secret intelligence records obtained exclusively by Global News. The records from Canada’s Communications Security Establishment (CSE) — labelled “Secret: Canadian Eyes Only” — say that due to their policies in eastern Europe, then-Minister of Foreign Affairs Chrystia Freeland and Minister of National…