Ville de Laval

Summary

A targeted cyberattack disrupted municipal IT systems in Laval, prompting authorities to proactively shut down network access to contain the incident, which caused significant online service outages affecting permit applications, property tax accounts, and assessment roll access. While emergency services including police, fire, water utilities, and libraries remained operational throughout, the attackers extracted a limited volume of data determined not to originate from municipal databases. Restoration efforts involving external cybersecurity experts prioritized system integrity, with citizens directed to alternative service channels during recovery operations expected to extend several days.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On September 14, 2022, the City of Laval experienced a major IT outage caused by a targeted malicious cyber activity. Upon detecting the unauthorized activity, the city proactively shut down all system access to contain the threat, resulting in widespread disruption to online citizen services. The municipality publicly confirmed the cyberattack via Twitter and its website, prioritizing the protection of citizen, employee, and supplier data throughout the incident. Critical infrastructure services—including police, fire departments, water utilities, and libraries—remained operational without interruption. However, digital platforms handling permit applications, property tax assessments, and tax account management became inaccessible.

The city confirmed attackers extracted a limited quantity of data during the breach but later determined through analysis that this information did not originate from municipal databases. Technical teams collaborated with external provider experts to implement corrective measures aimed at restoring system integrity. Recovery efforts were projected to extend through the weekend, with full service restoration anticipated by Sunday. Citizens were directed to use in-person counters or contact 311 for urgent requests during the outage. Municipal authorities maintained continuous public updates while emphasizing their confidence in resolving the situation promptly based on available information.

Sources

Sources available to members: 2 sources.