A Spate of Cyberattacks Across Canada Underscores the Need for Robust Cyber Defences

Several British Columbia (BC) libraries have been targeted by a ransomware attack, underscoring the importance of cyber hygiene measures for all types of organizations. On April 19, 2024, the BC Library Cooperative (the co-op) received an email from a hacker claiming to have stolen sensitive data and demanding a ransom for its release. Following an investigation, the co-op found that certain users’ phone numbers and email addresses were compromised, although not as many as the cybercriminal had initially claimed. Some of the stolen data was related to users who received automated notifications from the library between March 27 and April 19.

“Regardless of any limitations on data breached, we regret this breach happening at all,” the co-op said in a statement confirming the attack. The co-op provides integrated library systems for numerous institutions across the province, so the breach impacted several libraries.

According to the co-op’s privacy and security officer, Scott Leslie, the data hack does not appear to have specifically targeted libraries. Instead, it “was a case of someone scanning for a known vulnerability.” Once the hacker discovered a flaw, they “proceeded to exploit it,” said Leslie. The co-op is reviewing its cybersecurity policies to ensure similar breaches don’t happen in the future.

Cyberattacks Elsewhere

The attack on BC libraries is one of several that have recently hit Canadian organizations. A cyberattack hit the Toronto library in the final quarter of 2023, shutting down digital materials, public computers and its book database. It took several months for the library to recover. Furthermore, numerous London Drugs stores closed across western Canada in April 2024 as it tackled a cybersecurity incident.

Next Steps

It’s more important than ever for organizations to review their cybersecurity policies and increase cyber hygiene measures amid frequent cyberattacks. Considering the attack on BC libraries exploited a known flaw, organizations should review their patching policies and ensure they fix software vulnerabilities swiftly. Additionally, cyber insurance can help financially protect organizations from various cyberthreats.

Did you know that 60% of small and medium businesses don’t survive after a cyber attack? Protect your business with Cyber Insurance, call us at 780.424.2727 or click here to get a quote.