Cyber Incident Victim: Ontario
Date:
Jul 2015
Location:
Canada
Summary
Anonymous hackers breached Canadian government systems, allegedly accessing classified national security documents in retaliation for the police shooting of activist James McIntyre in British Columbia. The group provided media with a document marked 'Secret,' detailing Treasury Board funding to address vulnerabilities in CSIS foreign stations' outdated data-processing systems, though its authenticity remains unverified. Threatening further leaks unless the involved officer was arrested, Anonymous claimed to possess additional sensitive files and disputed government assertions that no secrets were compromised, stating their actions included penetration tests beyond prior DDoS attacks. The incident highlighted concerns over CSIS operational inefficiencies and potential exposure of classified intelligence protocols.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 3 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On July 25, 2015, hackers affiliated with Anonymous claimed to have breached Canadian government computer systems and accessed classified national security documents. The group stated this action was retaliation for the RCMP's fatal shooting of activist James McIntyre during a protest in Dawson Creek, British Columbia, one week prior. Anonymous provided the National Post with a document appearing to be Treasury Board notes marked 'Secret,' detailing funding allocations to address operational deficiencies at Canadian Security Intelligence Service (CSIS) foreign stations. While the Post couldn't independently verify the document's authenticity, it contained specific criticisms of CSIS's outdated data-processing systems, noting they caused intelligence delays that compromised operational effectiveness and personnel security. Anonymous issued an ultimatum threatening to release additional sensitive materials unless the officer involved in McIntyre's shooting was arrested by 5:00 PM Pacific Time on Monday following their announcement. The group emphasized McIntyre's affiliation with Anonymous, evidenced by his wearing of a Guy Fawkes mask when shot, and described their operation as ongoing with planned "surprise" elements.
In response, Public Safety Minister Steven Blaney publicly denied any compromise of personal information or government secrets, specifically asserting "there has not been a hack of CSIS." However, a government source acknowledged awareness of Anonymous's threats while being unable to confirm whether other departments remained secure. Anonymous disputed Blaney's assessment, characterizing recent cyberattacks as "final penetration tests" targeting both government systems and media response protocols. The sample document provided to media contained redactions applied by the hackers themselves, who expressed uncertainty about classification markings that might reveal compromised systems. The Treasury Board notes described a new system being piloted at two CSIS foreign stations before planned expansion to all 25 stations. The National Post corroborated through third parties that the communications originated from individuals with documented history of high-level Anonymous operations, though the specific identities of participants remained undisclosed. Authorities did not publicly confirm any data breaches beyond the document sample provided to media.