Qualinet

Summary

Qualinet experienced a cyberattack that resulted in the theft of some data during the early winter, prompting the activation of its emergency plan and the mobilization of specialists who restored systems after the breach. The company disclosed the incident transparently, noting that affected clients would be informed under Law 25, and forwarded the case to the Quebec City police while also informing the Commission d’accès à l’information du Québec. Executives emphasized that despite advanced security precautions the attack occurred, highlighted the growing use of artificial intelligence by criminals to identify vulnerabilities, and cited a recent CIRA survey showing a substantial portion of Canadian organizations have faced similar incidents.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

At the beginning of winter, Qualinet experienced a cyberattack that resulted in the theft of data. Upon detection of the breach, the company activated its emergency response plan. Qualinet mobilized a team of specialists to investigate the incident. The specialists worked to restore the affected systems. After restoration, Qualinet determined that certain data had been exfiltrated. In accordance with Law 25, the organization prepared to notify affected clients. The case was transferred to the Service de police de la Ville de Québec (SPVQ). The Commission d'accès à l'information du Québec was also informed of the incident.

Roger Vigneault, director of operations, stated that despite leading‑edge precautions, Qualinet had suffered a data theft and expressed regret. He added that after an initial analysis the systems were quickly restored and the theft of certain data was confirmed. Vigneault emphasized that the disclosure was made in the interest of transparency and compliance with legal obligations. Éric Pichette, president of Qualinet, noted that companies often treat cyberattacks as a taboo subject and choose not to speak publicly. He said he decided to go public to raise awareness among business leaders about the growing threat. Pichette observed that criminals can now use artificial intelligence to automatically seek targets, identify vulnerabilities, or encrypt data. He cited a Canadian Internet Registration Authority survey from August 2024 in which 44 percent of Canadian organizations reported having been victim of a cyberattack in the previous twelve months. Qualinet declined a request for an interview regarding the incident.

Sources

Sources available to members: 1 source.