Royal Military College Saint-Jean

Summary

A cyberattack targeted four Canadian military training institutions, including Royal Military College in Kingston, RMC Saint-Jean in Quebec, the Canadian Forces College in Toronto, and the Chief Warrant Officer Robert Osside Institute. The incident temporarily disabled the institutions' online networks, with a computing expert confirming that all core systems were compromised in the mysterious attack.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On the morning of July 3, 2020, a cyberattack disrupted the online networks of four Canadian military training institutions, including RMC Saint-Jean in Quebec. The incident simultaneously affected Kingston’s Royal Military College, the Canadian Forces College in Toronto, and the Chief Warrant Officer Robert Osside Institute. The attack was discovered when the institutions experienced system-wide disruptions, temporarily disabling core operational networks. David Skillicorn, a Queen’s University computing professor, confirmed the severity, stating “all their core systems got hit,” indicating a broad compromise of essential infrastructure. No specific details about the attack vector or perpetrator were disclosed publicly, with the incident described only as a “mysterious cyber attack.” The immediate impact centered on the forced offline status of critical systems, though the duration of the outage and precise technical mechanisms remained unspecified in available reports.

The coordinated nature of the attack across geographically dispersed military schools suggested a targeted campaign against national defense training infrastructure. Public statements did not reveal whether data exfiltration occurred or if ransomware or other malware was deployed. Response actions were limited to initial detection and public acknowledgment of the disruption, with no disclosed containment measures, recovery timelines, or forensic findings. The incident highlighted vulnerabilities in military-adjacent educational networks but yielded no further operational details or long-term consequences from the available reporting. Skillicorn’s assessment provided the sole technical insight, emphasizing the scale of the compromise without elaborating on remediation efforts or attribution.

Sources

Sources available to members: 1 source.