Get Cyber Safe: A Call to Action for Canadians During Cybersecurity Awareness Month

As we navigate an increasingly digital world, the importance of cybersecurity cannot be overstated. This October, the Get Cyber Safe campaign, a national public awareness initiative, is urging Canadians to prioritize their online safety and educate themselves about the ever-evolving landscape of cybersecurity threats. This campaign coincides with Cybersecurity Awareness Month, a global effort aimed at promoting safe online practices.

Understanding Cybersecurity: A Collective Responsibility

Rajiv Gupta, head of the Canadian Centre for Cybersecurity, emphasizes the collective responsibility of cybersecurity, stating, “Cybersecurity is a collective responsibility, and it only takes one wrong click to become vulnerable to cyber criminals.” This statement serves as a stark reminder that every individual plays a crucial role in safeguarding not only their own information but also that of their communities and organizations.

The Get Cyber Safe campaign aims to empower Canadians by providing them with knowledge about the various threats that exist online. This year’s focus is on simple yet effective steps that everyone can take to enhance their online security.

The Current State of Cybersecurity in Canada

Statistics Canada has reported a concerning trend regarding cybersecurity incidents affecting Canadian businesses. In 2023, 16% of Canadian businesses reported being impacted by cybersecurity incidents, a decrease from 21% in 2019 and 18% in 2021. However, while the number of incidents may have declined, the financial repercussions have escalated dramatically.

In 2023, the total spending on recovery from cybersecurity incidents reached a staggering $1.2 billion, doubling from $600 million in 2021. Large businesses accounted for approximately $500 million of this spending, while small- and medium-sized enterprises contributed around $300 million. Furthermore, the total expenditure on prevention and detection of cybersecurity incidents rose to $11 billion, up from $9.7 billion in 2021.

Common Cyberattack Methods

Understanding the most prevalent cyberattack methods is crucial for individuals and businesses alike. According to Statistics Canada, the following methods were the most commonly reported in 2023:

• Scams and Fraud: 50%
• Identity Theft: 31%
• Exploiting Software, Hardware, or Network Vulnerabilities: 25%
• Password Cracking: 22%
• Malicious Software (excluding ransomware): 18%
• Ransomware: 13%

It’s important to note that there can be overlaps in these percentages, as multiple methods may be employed in a single incident.

Cyberattacks in Our Communities

Across southern Ontario, various municipalities and organizations have fallen victim to cybersecurity incidents, highlighting the urgent need for awareness and preparedness. Here are some notable cases:

City of Hamilton

In February, the City of Hamilton experienced a cyberattack that disrupted numerous city services, including phone lines, transit operations, and public library services. The city has spent $7.4 million on recovery efforts, with nearly $5 million allocated to external assistance.

Law Firm Incident

A Hamilton law firm was hacked this summer, resulting in the personal information of clients, including sensitive documents, being posted on the dark web. This incident underscores the importance of robust cybersecurity measures for legal practices.

York Region District School Board

In November 2023, the York Region District School Board suffered a data breach that led to a network outage. Although no financial information was compromised, the board had to notify families about the potential exposure of personal data.

Town of Huntsville

The Town of Huntsville faced a ransomware attack in March, which severely impacted its computer systems and services, including ticket processing for the Algonquin Theatre.

Human Rights Legal Support Centre

A cybersecurity incident in late 2023 exposed sensitive client information at the Human Rights Legal Support Centre, prompting warnings for clients to remain vigilant against potential misuse of their data.

University of Waterloo

In mid-2023, the University of Waterloo thwarted a suspected ransomware attack that compromised an email server, affecting a limited number of individuals.

City of Burlington

The City of Burlington took four years to recover most of the $503,000 lost in a phishing scam that targeted city staff, demonstrating the long-term impact of cyber fraud.

Highway 407 ETR

Highway 407 ETR issued warnings about phishing scams targeting customers through fraudulent text messages, highlighting the need for vigilance against deceptive communications.

Top Scams of 2023

As the year draws to a close, the Canadian Anti-Fraud Centre has released a list of the top scams of 2023, which includes investment scams, targeted phishing attacks, service scams, romance scams, and emergency scams. Awareness of these scams is crucial for individuals to protect themselves from falling victim.

Protecting Yourself Online

To combat these threats, Get Cyber Safe offers a wealth of resources and information on how Canadians can protect themselves from cyber scams. The Canadian Anti-Fraud Centre also provides guidance on steps to take if you become a victim of cybercrime.

In conclusion, as Cybersecurity Awareness Month unfolds, it is imperative for all Canadians to take proactive steps to safeguard their online presence. By staying informed about potential threats and implementing recommended safety measures, we can collectively create a safer digital environment for everyone. Remember, in the realm of cybersecurity, knowledge is power, and vigilance is key.