The Canadian government and the FBI have confirmed that Chinese state-backed hackers have breached at least one Canadian telecommunications company, part of a broader cyber-espionage campaign linked to the group Salt Typhoon.
In a joint advisory released late Friday, officials revealed that the breach occurred in mid-February 2025, where attackers exploited Cisco routers to covertly siphon data from the network. The specific telecom provider was not named, but the activity is part of a wider pattern of targeting across Canada.
Authorities say Salt Typhoon’s operations extend beyond just telecoms, with investigations showing a broader focus across multiple sectors. The group, active since late 2024, has also previously attacked U.S. telecom firms, data centers, and infrastructure providers, aiming to gather intelligence on senior U.S. government figures.
Salt Typhoon is believed to be part of China’s strategic cyber posture, possibly tied to preparations for a future military move against Taiwan, which U.S. intelligence believes could happen by 2027.
The advisory warns that these cyber intrusions are likely to continue over the next two years, targeting Canadian institutions in both the public and private sectors.





