Ransomware activity in Canada
76
Public victims
8
Active groups
8
Sectors hit
Source: Ransomware.live
Most active groups
qilin (11) thegentlemen (11) Storm (10) incransom (4) play (4) N0n (3) settra (2) krybit (2)
Most affected sectors
Manufacturing (13) Professional Services (13) Financial Services (7) Technology (7) Not Found (6) Healthcare (5) Retail & E-Commerce (4) Other (4)
Recently listed organizations
| Organization | Sector | Listed |
|---|---|---|
| CAS Paper Mill | Manufacturing | 2026-10-16 |
| ServiceMaster of Ottawa | Professional Services | 2026-10-16 |
| Shediac Lobster Shop | Retail & E-Commerce | 2026-10-14 |
| YYC Advisors | Financial Services | 2026-10-13 |
| Canadian Mennonite University (CMU) | Education | 2026-10-12 |
| Company #14 | Not Found | 2026-10-11 |
| hsc.mb.ca | Healthcare | 2026-10-11 |
| Saskatoon Tribal Council | Government & Defense | 2026-10-09 |
| Husky Ltee | Other | 2026-10-09 |
| Asessippi Ski Resort | Hospitality | 2026-10-09 |
| Northwestern Polytechnic | Education | 2026-10-09 |
| mblllp | Not Found | 2026-10-09 |
| Anaergia | World-Leading Anaerobic Digestion Solutions | Energy & Utilities | 2026-10-09 |
| Cooperative Des Techniciens Ambulanciers De La Monte | Healthcare | 2026-10-08 |
| Company #2 | Financial Services | 2026-10-05 |
| Nipigon District Memorial Hospital | Healthcare | 2026-10-04 |
| Rotamac | Manufacturing | 2026-10-03 |
| Soni Medical Centre | Healthcare | 2026-10-02 |
| MCAP — MortgageHub commercial lending platform | Financial Services | 2026-09-30 |
| cpacb.com | Professional Services | 2026-09-29 |
| ATCO Ltd | Energy & Utilities | 2026-09-28 |
| Island | Technology | 2026-09-27 |
| Metalware Corporation | Manufacturing | 2026-09-26 |
| Textile City | Manufacturing | 2026-09-22 |
| Manroc Developments | Other | 2026-09-21 |
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.