Cyber Incident Victim: Ville de Lac-Mégantic
Date:
Nov 2023
Location:
Canada
Summary
A cyberattack disrupted multiple municipal services in Lac-Mégantic, causing widespread IT failures affecting public facilities, email communications, public WiFi, and payment systems. Essential services including drinking water, wastewater management, and fire safety were secured promptly. Recovery efforts involved external experts working to restore systems and retrieve data, though operations remained limited with no immediate access to documents or archives. This incident followed unrelated IT network maintenance issues the previous month, prompting the municipality to commission an audit to address system vulnerabilities. Officials confirmed no threats were received but emphasized the seriousness of data security and citizen privacy protection amid increasingly complex cyber threats. The mayor acknowledged significant recovery challenges and requested public patience during restoration.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On November 30, 2023, the Ville de Lac-Mégantic reported a cyberattack that paralyzed municipal services across all departments, including the ecocentre, City Hall, Mégantic Sports Centre (CSM), and Baie-des-Sables tourist station. The attack disrupted email systems, public Wi-Fi at the CSM, and payment processing for traffic violations. Essential services such as drinking water, wastewater management, and fire safety were secured within hours of detection. Communications Director Karine Dubé confirmed all city services remained affected days after the incident, with teams prioritizing phased restoration of internet networks and email accounts while data archives remained inaccessible. External cybersecurity experts worked continuously through the weekend to rebuild systems and recover data, though progress was described as slow. The municipality characterized the event as a major IT disaster requiring extensive reconstruction efforts.
This marked the second significant IT disruption within a month, following an unrelated November outage caused by faulty network maintenance that similarly impacted email, scheduling systems, and sports facility bookings. After that initial incident, the municipal council contracted an IT firm on November 21 to audit system vulnerabilities and address network weaknesses. The firm subsequently adjusted its mandate to assist with post-attack reconstruction following the cyber incident. Officials confirmed no ransom demands or threats were received and reiterated commitments to safeguarding citizen and employee data. Mayor Julie Morin acknowledged the prolonged recovery challenges ahead and requested public patience as staff worked to restore operations.