Chinese-backed Hackers 'Almost Certainly' Targeted Canada During Theft of Millions of Americans' Data

A warning from Canada's cyber intelligence agency, the Communications Security Establishment (CSE), has confirmed that a Chinese hacking group known as Salt Typhoon "almost certainly" targeted a Canadian telecommunications company during the theft of millions of Americans' data.

The statement was released last week by more than a dozen international government agencies, including those from the United States, Australia, and Canada. The joint advisory warned of a "deliberate and sustained campaign" by Salt Typhoon, which targeted various infrastructure networks around the world.

The Scale of the Attack

According to the CSE statement, Salt Typhoon's operations have been ongoing since at least 2021, with considerable success in exploiting publicly known vulnerabilities and other weaknesses. The group has compromised multiple telecommunications networks as part of an espionage campaign, putting sensitive information at risk.

The FBI said that Salt Typhoon "recklessly stole personal data belonging to millions of Americans" and even surveilled communications in support of the Chinese Communist Party. The bureau stated that "the expectation of privacy was violated not just in the United States but abused globally."

The Canadian Connection

The CSE did not provide specific details on how many Canadians may have been affected by the attack, citing concerns about confidentiality. However, an earlier warning issued by the agency in June indicated that state-sponsored cyber threat actors, specifically Salt Typhoon, had compromised network devices registered to a Canadian telecommunications company in February.

The agency stated that these actors targeted critical infrastructure and extracted bulk customer data and information on high-value targets like government officials. While it is unclear which specific company was targeted and how many Canadians were involved, experts warn that the impact could be significant.

Expert Analysis

Cynthia Kaiser, a former senior official with the FBI who oversaw investigations into hacking operations, described the scope of Salt Typhoon's campaign as "broad" and "persistent." She emphasized that it is unlikely any American was spared from the attack.

Charles Finlay, executive director of the Rogers Cybersecurity Catalyst at Toronto Metropolitan University, highlighted the sophistication and persistence of Salt Typhoon. He noted that the group represents a significant threat to international cybersecurity and warned that average Canadians are not equipped with practical defenses against such attacks.

Action Needed

Finlay urged Parliament to prioritize cybersecurity as part of national defence capacity. "What we're talking about is the digital battle space," he said. "The moment for strategies is over. It is time for action and investment."

The international community has issued a joint statement warning of Salt Typhoon's activities, and experts emphasize that awareness and preparedness are crucial in countering this evolving threat.