2026 has seen escalating attacks across healthcare, telecoms, and financial sectors, with ransomware and credential theft as dominant vectors. Major incidents impacting North America include breaches at Canadian insurers, US healthcare systems, and global education platforms affecting millions.
Unauthorized access to Telus systems resulted in theft of customer data, call records, background check details, and source code.
What it means: Major Canadian telecom breach compromises millions of customer records and infrastructure data, enabling identity theft and fraud across North America.
Phishing attack in August 2025 compromised investor records including social insurance numbers and financial information, discovered mid-January 2026.
What it means: Canadian investment industry exposed to identity theft and financial fraud affecting 750,000 investors nationally.
Unauthorized access to customer contact systems exposed names, addresses, email, phone numbers, IBANs, and identification details.
What it means: Global telecom breach impacts European and North American customers through compromised contact and financial data.
Ransomware attack forced closure of all 35 clinic locations, disabled EPIC electronic medical records system, and forced clinicians to revert to paper documentation.
What it means: US healthcare disruption demonstrates how ransomware targeting medical systems directly impacts patient care delivery.
Criminal extortion group breached Canvas, the nation's most popular learning management system used by 41% of North American higher education institutions, compromising 9,000 schools.
What it means: Educational infrastructure breach exposes personal information of students, teachers, and staff across North America.
Criminal extortion group accessed Canada Life employee account, exposing customer personal information including names, dates of birth, addresses, and income levels.
What it means: Canadian insurer breach compromises workplace benefits and retirement plan data for customers nationally.