A report relayed by Le Journal de Montréal describes cybercrime groups organized like genuine businesses, with employees and set business hours. Based on the information available, the source does not specify a location or a particular victim: it documents a mode of organization, not an isolated incident.

Key points

  • Some cybercrime groups operate with dedicated employees and set business hours, according to the information available in this report.
  • The source does not name any victim or specific location: it describes a phenomenon of organization, not an isolated, localized case.
  • This professionalization means more systematic attacks, which can target smaller organizations perceived as less protected.

What this report reveals about the structure of criminal groups

The report describes organizations structured like businesses: employees assigned to specific tasks and set business hours, suggesting a division of roles across the stages of an attack, according to the information available.

This description aligns with what several cybersecurity organizations have been documenting for a number of years: cybercrime is no longer the work of isolated individuals, but an organized economy with a division of labour. The source does not specify where these groups are located or which organizations they have targeted, so we cannot comment on a specific case, but this report serves as a useful reminder of an underlying trend.

What this means for a Quebec SMB or nonprofit

An organized criminal structure, with employees and business hours, is seeking a return. It does not choose its targets only through one-off opportunism, and a smaller, less protected organization can represent an attractive target regardless of its size.

For an SMB or nonprofit, size is therefore not a protection in itself. There is no absolute protection against this type of threat, and no serious provider can guarantee one. Recognized baseline measures, such as those compiled by the Canadian Centre for Cyber Security, can nonetheless make an intrusion significantly more difficult and more costly for an organized group.

Obligations to know, even without a confirmed incident

Even in the absence of a specific incident in this source, organizations that process personal information in Quebec have obligations under the law, including maintaining a register of confidentiality incidents.

The Act respecting the protection of personal information in the private sector governs these obligations for any organization established in Quebec, regardless of size, and in some cases requires notification to the Commission d’accès à l’information (Quebec’s access to information oversight body). Checking that this register exists and that notification roles are clear remains a simple measure, independent of any specific incident.

FAQ

Does this report concern an attack that occurred in Quebec?

The source does not specify this. The available excerpt describes the internal structure of cybercrime groups (employees, business hours) without naming a victim or a specific location. We remain cautious: this article concerns a mode of organization documented by the press, not a localized incident we could confirm. For exact details, consult the original source at the end of the article.

Can a Quebec SMB be targeted by this type of organized group?

Yes, in principle. An organized criminal structure is seeking a return, and smaller organizations, often less protected, can represent an attractive target despite their modest size. Nothing about a company’s size automatically shields it from this type of threat.

Is there a way to be completely protected against these groups?

No. There is no absolute protection, and no serious provider can guarantee one. Recognized measures, such as those proposed by the Canadian Centre for Cyber Security, can nonetheless significantly reduce exposure and make an intrusion more difficult and more costly for a criminal group.

Sources

Source: Le Journal de Montréal · https://news.google.com/rss/articles/CBMimgFBVV95cUxOLW1BQ1RZbHpnbW4tTEhpTG9zekhvMHFwOXBLUVFTQ2twY243YVFVV3E5dzhkMzAxdXRFc3R5ckZMMXBlZ25RR3V1SVZnMWk4dks1U3JfTjVtWkI5RF9zY3lLemU1aWxJei1ZRDYyRnFaaW00aDNuY1pKYlM3UnJVaktCVG5DM3hLN3BMRWlDelBnSHJvcTJobS1B?oc=5