Weekly briefing › No. 17
Weekly briefing · No. 17 · 6 May 2026
2026 has seen escalating attacks across healthcare, telecoms, and financial sectors, with ransomware and credential theft as dominant vectors.
Major incidents impacting North America include breaches at Canadian insurers, US healthcare systems, and global education platforms affecting millions.
This issue’s disclosures
CriticalMar 15, 2026
Telus
Credential Theft · 700TB data records
Unauthorized access to Telus systems resulted in theft of customer data, call records, background check details, and source code.
What it means: Major Canadian telecom breach compromises millions of customer records and infrastructure data, enabling identity theft and fraud across North America.
Mar 15, 2026
CriticalJan 31, 2026
CIRO
Credential Theft · 750K records
Phishing attack in August 2025 compromised investor records including social insurance numbers and financial information, discovered mid-January 2026.
What it means: Canadian investment industry exposed to identity theft and financial fraud affecting 750,000 investors nationally.
Jan 31, 2026
CriticalFeb 7, 2026
Odido
Credential Theft · 6.2M records
Unauthorized access to customer contact systems exposed names, addresses, email, phone numbers, IBANs, and identification details.
What it means: Global telecom breach impacts European and North American customers through compromised contact and financial data.
Feb 7, 2026
CriticalFeb 15, 2026
University of Mississippi Medical Center
Healthcare · Unknown records
Ransomware attack forced closure of all 35 clinic locations, disabled EPIC electronic medical records system, and forced clinicians to revert to paper documentation.
What it means: US healthcare disruption demonstrates how ransomware targeting medical systems directly impacts patient care delivery.
Feb 15, 2026
CriticalMay 3, 2026
Instructure
Credential Theft · 275M records
Criminal extortion group breached Canvas, the nation's most popular learning management system used by 41% of North American higher education institutions, compromising 9,000 schools.
What it means: Educational infrastructure breach exposes personal information of students, teachers, and staff across North America.
May 3, 2026
HighApr 20, 2026
Canada Life
Credential Theft · 70K records
Criminal extortion group accessed Canada Life employee account, exposing customer personal information including names, dates of birth, addresses, and income levels.
What it means: Canadian insurer breach compromises workplace benefits and retirement plan data for customers nationally.
Apr 20, 2026
This issue by category
Where this issue’s disclosures sit.
The 6 disclosures in issue No. 17, by the category we filed each one under.