Canadian Spy Agency Disrupted Ransomware, Fentanyl Traffickers and Extremists
Threat Actor Intelligence · 6 sources · Updated 4mo ago · First seen Jul 6, 2026

Canada’s Communications Security Establishment (CSE) disclosed that it carried out three state-authorized foreign active cyber operations against an overseas ransomware-as-a-service gang, fentanyl-linked chemical traffickers, and a violent extremist organization. According to the agency’s annual reporting, the ransomware operation rendered parts of the gang’s infrastructure inoperable and deleted a large volume of stolen data that had been advertised for sale on the dark web, while the operation against chemical brokers disrupted activity tied to precursor sales used in fentanyl production.
CSE also said its operation against the extremist group used data from internet-connected devices to undermine the group’s credibility and reduce its ability to recruit and radicalize people in Western countries, including Canada. Separately, the agency reported technical disruptions against 10 significant ransomware gangs targeting Canadian healthcare, transportation, and business sectors, as well as a defensive cyber operation that disrupted a phishing campaign aimed at Canadian federal institutions and other critical systems.


