SolarWinds Cyber Compromise

SolarWinds compromise

In December 2020, media reported that a highly skilled cyber-actor conducted a supply chain compromise by creating a backdoor into a software update for the SolarWinds’ Orion platform. This software update was downloaded by at least 16,000 SolarWinds clients.

This allowed the actor to install additional malware into the networks of a subset of these clients. While computers and networks of thousands of Orion users were made vulnerable by downloading an infected version of the software, it is likely that a smaller subset was actually exploited in attempts to steal data.

Ensuring a safe and secure Canada

The Government of Canada is committed to building resilience, reducing threats, and promoting international stability in cyberspace. Canada supports the application of the universally agreed, voluntary norms of responsible State behaviour in cyberspace and recognition of the applicability of international law.

Dialogue, cooperation, diplomacy, advocacy, and when necessary, action each have a role to play in Canada’s security and prosperity. These are essential tools for ensuring Canada’s future in the 21st century.

Working with partners

Defending Canada and Canadians against cyber-threats is a shared responsibility that requires work with our partners and allies.

Canada and the United States actively engage in joint efforts to improve cyber security at home and counter threats from abroad. This includes identifying cyber- threats and vulnerabilities, developing capabilities to respond to a range of cyber- incidents, and building national resiliency.

Our two countries have committed to increase cooperation to strengthen cyber security, and to confront foreign interference and disinformation. Under the Roadmap for a Renewed Canada-U.S. Partnership, Prime Minister Trudeau and President Biden agreed that Canada and the United States will increase cooperation to strengthen cybersecurity. As part of our efforts to protect critical infrastructure in North America, we will implement a Framework for Collaboration on Cyber Security in the Energy Sector to enhance the security and resiliency of our cross-border energy infrastructure.

Canada remains strongly committed to constructive engagement in a rules-based multilateral system and stands ready to address the cyber and emerging technology challenges of the 21st century.