Read the PDF version here.
In January 2026, the Canadian Centre for Cyber Security released its report assessing the ransomware threat to Canada (the Report).1 The Report highlighted, among other things, that ransomware events in Canada are increasing and will remain a significant threat in the next two years, particularly by threat actors leveraging advancements in artificial intelligence (AI).
Legacy information technology (IT) and operational technology (OT) systems and supply chain dependencies are attractive targets for cyberattacks, and such vulnerabilities remain a top concern within the energy sector. While critical infrastructure and large corporations continue to be prime targets for ransomware threats, no organization is immune to cyber incidents.2
