Black & McDonald

Black & McDonald is a Canadian engineering firm headquartered in Canada. It provides engineering services to sectors including military bases, power plants, and transportation infrastructure. The firm works on contracts that support national defense and power generation entities. Its scope includes design, implementation, and maintenance of critical infrastructure projects. The company serves clients across Canada and potentially internationally, though specific markets are not detailed in the source. Its headquarters location in Canada situates it within a key jurisdiction for engineering and defense contracting.

In March 2023, Black & McDonald experienced a ransomware attack that was reported by news outlets. The attack prompted the firm to notify key clients, including national defense and power generation organizations, leading to precautionary measures such as temporary email communication blocks. While clients reported no operational impacts, cybersecurity experts warned of significant national security risks due to potential data exfiltration and possible involvement of state‑affiliated threat actors. The firm declined to publicly confirm details of the attack, including mitigation efforts or the ransomware’s origin. This lack of disclosure contributed to expert skepticism about the full scope and consequences of the incident. The event highlighted vulnerabilities in critical infrastructure supply chains and underscored concerns about data being exfiltrated to hostile nation‑states.