Skip to main content
The Globe and Mail
Support Quality Journalism.
The Globe and Mail
First Access to Latest
Investment News
Collection of curated
e-books and guides
Inform your decisions via
Globe Investor Tools
per week
for first 24 weeks

Enjoy unlimited digital access
Enjoy Unlimited Digital Access
Get full access to
Just $1.99 per week for the first 24 weeks
Just $1.99 per week for the first 24 weeks
var select={root:".js-sub-pencil",control:".js-sub-pencil-control",open:"o-sub-pencil--open",closed:"o-sub-pencil--closed"},dom={},allowExpand=!0;function pencilInit(o){var e=arguments.length>1&&void 0!==arguments[1]&&arguments[1];select.root=o,dom.root=document.querySelector(select.root),dom.root&&(dom.control=document.querySelector(select.control),dom.control.addEventListener("click",onToggleClicked),setPanelState(e),window.addEventListener("scroll",onWindowScroll),dom.root.removeAttribute("hidden"))}function isPanelOpen(){return dom.root.classList.contains(}function setPanelState(o){dom.root.classList[o?"add":"remove"](,dom.root.classList[o?"remove":"add"](select.closed),dom.control.setAttribute("aria-expanded",o)}function onToggleClicked(){var l=!isPanelOpen();setPanelState(l)}function onWindowScroll(){window.requestAnimationFrame(function() {var l=isPanelOpen(),n=0===(document.body.scrollTop||document.documentElement.scrollTop);n||l||!allowExpand?n&&l&&(allowExpand=!0,setPanelState(!1)):(allowExpand=!1,setPanelState(!0))});}pencilInit(".js-sub-pencil",!1); // via darwin-bg var slideIndex = 0; carousel(); function carousel() { var i; var x = document.getElementsByClassName("subs_valueprop"); for (i = 0; i < x.length; i++) { x[i].style.display = "none"; } slideIndex++; if (slideIndex> x.length) { slideIndex = 1; } x[slideIndex - 1].style.display = "block"; setTimeout(carousel, 2500); } //

Canadian government computer systems were not compromised by the massive breach of U.S. government networks and private companies’ systems around the world, according to General Jonathan Vance, Chief of the Defence Staff.

U.S. security agencies say Russia’s foreign intelligence service, the SVR, carried out “most or all of the recently discovered, ongoing cyber compromises of both government and non-governmental networks.”

In late December, Microsoft said more than 40 organizations around the world, including in Canada, were targeted using network-management software from Texas-based SolarWinds Inc.

Story continues below advertisement

Ottawa has said little about the sophisticated cybersecurity attack, but Gen. Vance told The Globe and Mail the hackers did not breach federal government computer networks, including sensitive military computers.

“There is no indication to me that they did. Not that I know,” he said. “But don’t feel too comfortable, because we are attacked, hit, state or non-state sponsored … hundreds of thousands of times a day. Our defences are good, but we have some failures.”

Gen. Vance pointed to China’s state-sponsored cyberattack on the National Research Council’s computer infrastructure in 2014, which caused hundreds of millions of dollars in damage.

The general, who retires as top military commander later this month, said Russian and Chinese spy agencies have developed vast networks of cyberhackers in an attempt to secure military and economic advantage.

“With Russia and China, you are talking about industrial-level, massive investments in the ability to dominate cyberspace,” he said. “That deep cyberthreat can have a tremendous impact on a lot of things.”

The general said Canada has invested much money and expertise to defend against cyberattacks, particularly through the Communications Security Establishment (CSE), which is responsible for signals intelligence and cyber security.

“We have the skills and the drills to do it, and I do have the authority to operate in cyberspace, to do offensive operations in cyberspace, but I won’t go into any more details,” he said.

Story continues below advertisement

CSE would say only that its assessment of the situation is continuing. “As a result, we do not have any further information to add on potential victims,” media spokesperson Evan Koronewski said.

Mr. Koronewski added that the Canadian Centre for Cyber Security, a unit of CSE, has issued a cyber alert with recommended actions and mitigation advice.

Shared Services Canada (SSC), which manages most of Ottawa’s IT infrastructure, said that at this point, none of the SolarWinds platforms and products the government uses have been affected by the incident.

“SSC has had no indications of a compromise in any infrastructure it maintains,” the department said.

Christopher Parsons, a senior research associate at the Citizen Lab, a cybersecurity outfit at the Munk School of Global Affairs, said what remains unclear is whether companies supplying departments such as National Defence or firms responsible for critical infrastructure have been affected by the hack.

“If the government of Canada is clean – which we all hope they are – that doesn’t necessarily mean one of the shipyards building vessels for the military or Coast Guard, for instance, is unaffected by this,” he said.

Story continues below advertisement

The Department of National Defence did not immediately respond to a question on whether it had surveyed suppliers.

The U.S. government said the hack, which is believed to have started in March, compromised federal agencies and “critical infrastructure” in an attack that was hard to detect and will be difficult to undo.

Reuters reported Monday that the hackers deployed malicious computer code with links to spying tools previously used by suspected Russian hackers.

Investigators at Moscow-based cybersecurity firm Kaspersky said the “backdoor” used to compromise up to 18,000 SolarWinds customers closely resembled malware tied to a hacking group known as “Turla,” which Estonian authorities have said operates on behalf of Russia’s FSB security service.

Their findings are the first publicly available evidence to support U.S. assertions that Russia orchestrated the hack, which compromised several sensitive federal agencies and is among the most ambitious cyber operations ever disclosed.

Moscow has repeatedly denied the allegations. The FSB did not respond to a request for comment.

Story continues below advertisement

Know what is happening in the halls of power with the day’s top political headlines and commentary as selected by Globe editors (subscribers only). Sign up today.

Your Globe

Build your personal news feed

  1. Follow topics and authors relevant to your reading interests.
  2. Check your Following feed daily, and never miss an article. Access your Following feed from your account menu at the top right corner of every page.

Follow the authors of this article:

Follow topics related to this article:

View more suggestions in Following Read more about following topics and authors
Report an error Editorial code of conduct
Due to technical reasons, we have temporarily removed commenting from our articles. We hope to have this fixed soon. Thank you for your patience. If you are looking to give feedback on our new site, please send it along to If you want to write a letter to the editor, please forward to

Welcome to The Globe and Mail’s comment community. This is a space where subscribers can engage with each other and Globe staff. Non-subscribers can read and sort comments but will not be able to engage with them in any way. Click here to subscribe.

If you would like to write a letter to the editor, please forward it to Readers can also interact with The Globe on Facebook and Twitter .

Welcome to The Globe and Mail’s comment community. This is a space where subscribers can engage with each other and Globe staff. Non-subscribers can read and sort comments but will not be able to engage with them in any way. Click here to subscribe.

If you would like to write a letter to the editor, please forward it to Readers can also interact with The Globe on Facebook and Twitter .

Welcome to The Globe and Mail’s comment community. This is a space where subscribers can engage with each other and Globe staff.

We aim to create a safe and valuable space for discussion and debate. That means:

  • Treat others as you wish to be treated
  • Criticize ideas, not people
  • Stay on topic
  • Avoid the use of toxic and offensive language
  • Flag bad behaviour

If you do not see your comment posted immediately, it is being reviewed by the moderation team and may appear shortly, generally within an hour.

We aim to have all comments reviewed in a timely manner.

Comments that violate our community guidelines will not be posted.

Read our community guidelines here

Discussion loading ...

To view this site properly, enable cookies in your browser. Read our privacy policy to learn more.
How to enable cookies