Qualinet

Summary

A data theft cyberattack was discovered in early winter against Groupe Qualinet, prompting the company to activate its emergency plan and engage a team of specialists to assess the scope of the incident. The company's operations director confirmed that data was exfiltrated despite existing advanced security measures, and that systems were rapidly restored following an initial analysis. The case was handed over to the Service de police de la Ville de Québec, and the Commission d'accès à l'information du Québec was notified of the breach. Affected clients are being notified in compliance with Quebec's Law 25 governing personal information. The company's president publicly disclosed the incident to encourage greater awareness among business leaders, noting that cybercriminals increasingly use tools such as artificial intelligence to identify vulnerabilities and encrypt data.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Groupe Qualinet, a Quebec-based company, was the victim of a cyberattack that resulted in the theft of data during the early part of winter 2025. Roger Vigneault, the company's director of operations, confirmed the incident in a press release issued on a Monday morning, acknowledging that the organization had been the target of a data theft despite the presence of advanced security precautions guarding its systems. According to Vigneault, an initial analysis of the incident allowed Qualinet to rapidly restore its affected systems, though the analysis also confirmed that certain data had been exfiltrated by the attackers. The company expressed regret over the incident and emphasized its commitment to transparency by publicly disclosing the information. The disclosure was made in compliance with Quebec's Law 25, which governs the handling of personal information and imposes specific obligations on organizations regarding the protection and governance of such data. Under this legal framework, Qualinet was required to notify affected clients of the breach. The company stated that it had always prioritized the protection of its clients' confidential data and regarded the matter as one of significant importance.

The incident was reported to and is being handled by investigators from the Service de police de la Ville de Québec (SPVQ), and the Commission d'accès à l'information du Québec was also notified of the breach. Éric Pichette, the president of Qualinet, chose to publicly address the incident, stating that many victimized businesses treat cyberattacks as a taboo subject and prefer to remain silent. He issued a call to the business community urging corporate leaders to become more aware of cybersecurity risks, which he characterized as a generalized problem affecting a growing number of organizations. Pichette further commented on the evolving threat landscape, noting that artificial intelligence is now being leveraged by criminals to automatically scan for potential targets, identify vulnerabilities in systems, and encrypt data. He asserted that stronger protective measures adopted by local businesses would reduce the likelihood of criminals targeting Quebec-based organizations. According to a survey conducted by the Canadian Internet Registration Authority (CIRA) in August 2024, which polled 500 respondents, 44 percent of Canadian organizations reported having been the victim of a cyberattack within the previous twelve months. In response to the breach, Qualinet activated its emergency plan and mobilized a team of specialists to assess the full scope of the attack. The company declined a request for an interview regarding the incident.

Sources

Sources available to members: 1 source.