Canada Cyber Watch
Reports since 1 Jan 2026. Not a live feed.
Threat level, Canada
Background readingHacktivismIncident response
No public level found
No published national cyber threat level found for Canada, checked 7 Nov 2026. Canada publishes no national cyber threat level; the Cyber Centre issues alerts, advisories and a biennial National Cyber Threat Assessment.
Source: Canadian Centre for Cyber Security alerts and advisories
From official agencies
| Date | Agency | Advisory or alert |
|---|
Agency headlines, unedited.
Compare countries
| Country | Threat level | Confirmed | Claimed only | Via a vendor | Latest report |
|---|---|---|---|---|---|
 Malaysia | Medium | 19 | 35 | 7 | 7 Nov 2026 |
 Singapore | None published | 12 | 24 | 3 | 7 Nov 2026 |
 Indonesia | None published | 6 | 32 | 0 | 5 Nov 2026 |
 Thailand | None published | 9 | 33 | 0 | 3 Nov 2026 |
 Philippines | None published | 9 | 35 | 4 | 7 Nov 2026 |
 Vietnam | None published | 5 | 34 | 0 | 5 Nov 2026 |
 Israel | None published | 4 | 2 | 0 | 7 Nov 2026 |
 Iran | None published | 4 | 0 | 0 | 13 Jun 2026 |
 United Arab Emirates | None published | 4 | 4 | 1 | 7 Oct 2026 |
 Saudi Arabia | None published | 2 | 5 | 0 | 12 Oct 2026 |
 Egypt | None published | 1 | 4 | 1 | 29 Oct 2026 |
 South Africa | None published | 8 | 0 | 1 | 26 Oct 2026 |
 Nigeria | None published | 2 | 3 | 0 | 8 Aug 2026 |
 Kenya | None published | 1 | 6 | 0 | 25 Jul 2026 |
 India | None published | 9 | 2 | 1 | 28 Oct 2026 |
 Pakistan | None published | 3 | 3 | 0 | 22 Jul 2026 |
 Bangladesh | None published | 1 | 5 | 0 | 23 Oct 2026 |
 Sri Lanka | None published | 4 | 3 | 1 | 1 Jul 2026 |
 Cambodia | None published | 0 | 3 | 0 | 10 Jun 2026 |
 Myanmar | None published | 1 | 5 | 0 | 25 Oct 2026 |
 Brunei | None published | 0 | 0 | 0 | |
 Poland | BRAVO-CRP | 5 | 0 | 4 | 1 Oct 2026 |
 Ukraine | None published | 7 | 0 | 1 | 4 Nov 2026 |
 Russia | None published | 7 | 0 | 1 | 1 Nov 2026 |
 Czechia | None published | 3 | 0 | 1 | 22 Oct 2026 |
 Romania | None published | 2 | 0 | 0 | 14 Jul 2026 |
 Estonia | None published | 5 | 0 | 3 | 4 Nov 2026 |
 Turkey | None published | 3 | 0 | 1 | 16 Sep 2026 |
 United Kingdom | None published | 5 | 1 | 3 | 2 Nov 2026 |
 Germany | None published | 4 | 0 | 1 | 2 Nov 2026 |
 France | None published | 7 | 0 | 2 | 4 Nov 2026 |
 Netherlands | None published | 5 | 1 | 1 | 2 Nov 2026 |
 Italy | None published | 5 | 0 | 0 | 7 Nov 2026 |
 Spain | None published | 3 | 0 | 0 | 5 Feb 2026 |
 Ireland | None published | 3 | 4 | 0 | 2 Nov 2026 |
 Sweden | None published | 5 | 3 | 2 | 2 Nov 2026 |
 United States | None published | 6 | 0 | 2 | 28 Aug 2026 |
| Canada | None published | 5 | 0 | 1 | 21 Aug 2026 |
 Mexico | None published | 2 | 4 | 1 | 21 Aug 2026 |
 Brazil | None published | 2 | 2 | 0 | 2 Nov 2026 |
 Argentina | None published | 1 | 2 | 0 | 4 Aug 2026 |
 Chile | None published | 1 | 2 | 0 | 2 Nov 2026 |
 Colombia | None published | 1 | 2 | 0 | 4 Nov 2026 |
 Japan | None published | 9 | 0 | 5 | 4 Nov 2026 |
 South Korea | Caution | 6 | 0 | 2 | 29 Oct 2026 |
 China | None published | 0 | 3 | 0 | 7 Aug 2026 |
 Taiwan | None published | 9 | 0 | 2 | 3 Nov 2026 |
 Hong Kong | None published | 3 | 0 | 3 | 30 Oct 2026 |
 Australia | None published | 5 | 0 | 1 | 2 Nov 2026 |
 New Zealand | None published | 7 | 2 | 1 | 3 Sep 2026 |
2026 counts. Click a row to open a country.
Official numbers
| Measure | Value | Period | Source |
|---|---|---|---|
| Cyber incidents the Cyber Centre responded to (federal and critical infrastructure) | more than 3,200 | April 2025 to March 2026 | CSE Annual Report 2025-2026 |
| Alerts and advisories published by the Cyber Centre | 25 alerts, 995 advisories | April 2025 to March 2026 | CSE Annual Report 2025-2026 |
| National Cyber Threat Notification System alerts sent | over 97,000 | April 2025 to March 2026 | CSE Annual Report 2025-2026 |
Who is targeting it
| Group | Kind | What it did | Sources | Reports |
|---|---|---|---|---|
| ShinyHunters | Extortion | Claimed the Telus Digital breach and a multi-month theft of BPO and telecom data. | BleepingComputer | Profile |
Laws and rules this year
- 15 Jun 2026Bill C-8, An Act respecting cyber security (S.C. 2026, c. 9). Received Royal Assent; it amends the Telecommunications Act and sets cyber security duties for federally regulated critical systems. Source
Full stories
Official statements
- 29 Jun 2026CSE released its 2025-2026 annual report, citing more than 3,200 incidents handled and action against 10 ransomware groups. Communications Security Establishment
- 15 Jun 2026Bill C-8 received Royal Assent. Parliament of Canada
- 26 Mar 2026The House of Commons passed Bill C-8 on cyber security at third reading. Parliament of Canada
Incidents
5 of 5 incidents
| What happened | Sources | |||||
|---|---|---|---|---|---|---|
 ✅ ConfirmedSickKids (Hospital for Sick Children)Via a vendor | 21 Aug 2026 | Health | Data leak | None | Confirmed. SickKids said a flaw in third-party software exposed data on staff and job applicants, with clinical systems unaffected. | BleepingComputer✓ 7 Nov |
 ✅ ConfirmedSaskatoon Tribal Council | 21 Aug 2026 | Government | Intrusion | Confirmed. The council said an incident found on 21 August may have exposed health, child and family service, HR and financial records. Claimed. The Gentlemen ransomware group listed the council as a victim. | Saskatoon Tribal Council · BlackFog, State of Ransomware October 2026✓ 7 Nov | |
 ✅ ConfirmedLoyalist College | 9 Jul 2026 | Education | Ransomware | None | Confirmed. The college said a ransomware actor accessed files with personal information and disrupted email, online classes and financial aid systems. | Quinte News✓ 7 Nov |
 ✅ ConfirmedTelus Digital | 12 Mar 2026 | Telecom | Data leak | Confirmed. Telus confirmed unauthorized access to a limited number of its systems and said operations continued. Claimed. ShinyHunters claimed close to 1 petabyte of data and a $65 million demand. | BleepingComputer✓ 7 Nov | |
 ✅ ConfirmedLoblaw Companies | 10 Mar 2026 | Retail | Data leak | None | Confirmed. Loblaw said a criminal third party accessed basic customer data such as names, phone numbers and email addresses and logged all customers out. | BleepingComputer · Cyber Daily✓ 7 Nov |
FAQ
Does Canada have a national cyber threat level?
No published national cyber threat level was found for Canada (checked 7 Nov 2026). Canada publishes no national cyber threat level; the Cyber Centre issues alerts, advisories and a biennial National Cyber Threat Assessment.
Which organisations in Canada confirmed cyber incidents recently?
5 incidents confirmed since January 2026: SickKids (Hospital for Sick Children), Saskatoon Tribal Council, Loyalist College, Telus Digital and Loblaw Companies.
What counts as a confirmed incident?
The organisation, a regulator, the police or a minister has said something happened, as reported by a named outlet. Everything else is listed as claimed.
Why list leak-site claims at all?
Ransomware and extortion crews post victims on leak sites before anyone confirms. The list shows what attackers say. Treat it as a lead and check with the organisation.
Is the map a live attack feed?
No. It counts incidents and claims reported in 2026. Live attack maps from security vendors show scanning traffic hitting their sensors, which does not mean a place was attacked.
How often is it updated?
By hand when a national level changes or a notable incident is reported. The date is shown in the header.
Sources: official statements and regional press, including Bernama, The Star, Malay Mail, CNN Indonesia and Newsbytes.PH; leak-site claims from public ransomware trackers. Each entry links its source.