In June 2025, Canada’s Centre for Cyber Security (Cyber Centre) and the United States’ FBI jointly stated that PRC-linked cyberespionage group Salt Typhoon had conducted malicious operations targeting Canada’s telecommunications infrastructure. According to the joint advisory, at least one Canadian telecommunications provider was breached in mid-February 2025. The attackers exploited vulnerabilities in network edge infrastructure, specifically older Cisco routers, to gain access and collect sensitive data. The Cyber Centre warned that Salt Typhoon was still targeting Canadian entities and was likely to persist in doing so over the next two years. In a separate advisory from April 2025, the Cyber Centre had already singled out Salt Typhoon as “ targeting network edge routers across critical infrastructure sectors”.
PRC state-affiliated hackers target Canadian telecommunications sector