China-backed hackers ‘almost certainly’ targeted Canada during theft of millions of Americans’ data
A Chinese hacking group known as Salt Typhoon, believed to have stolen information from a wide range of American targets, has also set its sights on a Canadian telecommunications company, according to a warning from Canada’s cyber intelligence agency.
The joint statement issued by multiple international government agencies, including the United States, Australia, and Canada’s Communications Security Establishment (CSE), highlighted Salt Typhoon’s deliberate and sustained campaign targeting various sectors such as telecommunications, government, transportation, lodging, and military infrastructure networks.
The stolen data, according to the statement, could potentially provide Chinese intelligence services with the ability to track and monitor communications and movements of targeted individuals worldwide. Cynthia Kaiser, a former FBI official, expressed concerns about the extensive reach of the hacking campaign, suggesting that nearly every American may have been affected.
While previous reports have hinted at Salt Typhoon’s activities, the recent joint statement indicates a larger and more persistent threat than initially thought. Last year, the group was reported to have compromised multiple telecommunications networks as part of an espionage effort, even targeting devices used by prominent political figures.
The FBI has condemned Salt Typhoon’s actions, accusing the group of recklessly stealing personal data on a massive scale and violating privacy expectations not only in the U.S. but globally. Despite inquiries about the impact on Canadians, CSE refrained from providing specific details, emphasizing the global nature of cyber threats posed by China.
In a troubling development earlier this year, CSE disclosed ongoing cyber activities targeting Canadian telecommunications companies, with Salt Typhoon suspected to be the perpetrator. The agency warned that state-sponsored actors had infiltrated a Canadian telecom company’s network, potentially compromising customer data and targeting high-value individuals.
Charles Finlay, an expert in cybersecurity, underscored the sophistication and persistence of Salt Typhoon’s attacks, urging greater focus on cybersecurity in national defence discussions. The joint statement recommended mitigation measures for network operators, but Finlay emphasized the need for broader awareness and investment in cybersecurity efforts.
As the digital battle space continues to evolve, stakeholders are urged to prioritize cybersecurity and take proactive steps to safeguard critical infrastructure and personal information. With the rise of sophisticated cyber threats, a collective and strategic response is essential to defend against malicious actors and protect national security interests.
