What happened
Cyber Centre alert AL25-016 says it and the RCMP received multiple reports of incidents involving internet-accessible industrial control systems. In one, water pressure values at a water facility were changed, degrading service to a community. In another, a Canadian oil and gas company's automated tank gauge was manipulated, triggering false alarms. In a third, temperature and humidity in a farm's grain-drying silo were altered, creating potentially unsafe conditions. (Canadian Centre for Cyber Security, Oct. 29, 2025)
What it means for Canada
Hacktivists manipulated real Canadian systems: a water facility, an oil and gas tank gauge and a farm grain silo. Victims were targets of opportunity because their controls were reachable from the internet.
- Sectors
- Municipal water · Oil and gas · Agriculture · Manufacturing and buildings
- Tools involved
- PLCs, HMIs and SCADA · Automated tank gauges · Building management systems
- Canadian rules
- Bill C-8 / Critical Cyber Systems Protection Act (phasing in) for designated energy and transport operators
Takeaways for Canadian businesses
- BusinessFind every control system reachable from the internet and remove direct access.
- BusinessWhere remote access is needed, use a VPN with multi-factor authentication.
- BusinessAssign clear security ownership for operational technology, including vendor-managed devices.
- BusinessReport incidents to the Cyber Centre (cyber.gc.ca) and the RCMP.
For the Canadian AI sector
As AI agents start to monitor or act on operational systems, the same exposure risks apply to the agent's access. Keep agents off internet-exposed control interfaces.
Written by AgentsNorth from the source below. General information, not legal or security advice.