AI giants warn hospitals and water systems are next. That includes Brampton.

Signature: LC/fPRuFart+WTFnuMARv3m2kDulNH5i8Kzrff3KVx5Fa8fdXfii4B80+8apY3NPyMxhAzbLUWKd6ZK3/gTvbonyn54sQQjjEfCxWt6aOrvFVzTPOWVCJ9nuakiZLzHNhPlhBfqF6MzbwnkBpy3SHAvXg8OJDSx6y6ShllMFBisafW1pPjlukEWYEz+uinh1PRVwzYe24RyrtXWJRJO6BCOsdy93BJFYW8cefQI84Fg19bFk/VM/7l/eG1bUbYWBDs3dQNFJD71kiaYrIdc77wwZ+7lFY/ux7bjz7xRBpVOdXEBlD8xN7Bdv4WbBPRh2cpL9LpMPJJp2lrGPj09Otxd3jpERppzLE1lf8O/g0S0ecsIPoe2O1n/swjG47WA1vFm0ykNu/j//1/+1o90gyFB4zS9TaQ5ViOEoXeJlXhsam8IsMhFFBXcEOSoZJCi+5IfEPl2YInLeQ5OFzPilbsmv0EocwLxpSnxCOfqJq1JIPpFYTvCsHaeUtOwjirVa/l2SnmZ/E/ycDBfBkpcHQIhIqt2rD0v+7GP4hAiero3uOjrbTansFpBjrYIajIs0oA4UI2xyQbUF3LeR5uf73Q5xa7jJk+/LnfFJhQ4jYoHN0fyaLd84YaB2XeirO0dC81pV7rIfdONtG9czTpHP6N29c/SPHGX27VB52TzY2SEtmgAl5VpYQyn9cf3Qh4EPi6h8A4q6YHTiSapvLaP53bUHHZWni0m4JaLUV0CVu8zxDXrGD2DEPb0dZZ5NzmvPJrOIlkOH0gJVH96iRMqLa2h/yyDx0MShXD6bHynCDQ+UEjDG6f9vRiPlMO9FSsY8zm+VtKBiKkFwuHQ2JcFEe1DvELcwSOL7Bjj0YHKCfohuEqxWOEOcmIxHCQso+AxlgLRuEX3dWJjdN/3N8kRzz4eE85HyDNy7YjE8j82mqhLY30T00/DqQEwtUjFgum6x9R7K4r1ctAkLdp1718UiOcQcrmPuAWSN5qla1RrrBtU=

By Bramptonist Staff
September 11, 2026

OpenAI, Google, Anthropic, Microsoft and more than 100 other companies have signed an open letter warning that AI-powered cyberattacks will get cheaper, faster and harder to stop in the coming months — and that hospitals, water plants and internet infrastructure are among the first places that will feel it.

The letter, published August 27, is titled A call for collective action on cyber defense. CrowdStrike, Cloudflare, Amazon, Visa, Mastercard, Oracle and IBM are among the signatories. Hugging Face signed too, weeks after OpenAI agents escaped a test environment and reached that company’s live systems.

The warning is not abstract for Brampton.

William Osler Health System runs Brampton Civic Hospital and Peel Memorial. Region of Peel runs the water and wastewater that come out of kitchen taps in Brampton, Mississauga and Caledon. The City runs transit, 911-adjacent systems, recreation bookings and the digital backbone behind permits and taxes. Those are exactly the categories the letter names as under-resourced and increasingly exposed.

“In the coming months, AI-enabled cyber attacks will become far more widespread and sophisticated as models around the world become increasingly capable. The companies and public services our communities depend on — from hospitals to water treatment plants to the infrastructure that powers the internet — are at risk.”

OpenAI open letter, August 27, 2026

Why this landed now

Frontier AI labs spent the summer disclosing that their own agents had slipped test cages and broken into real networks. OpenAI’s July incident at Hugging Face is the most cited. Anthropic and Meta reported similar breakouts. That is the backdrop for a letter that reads less like a product launch and more like an industry admission: the tools are getting good enough that yesterday’s patches will not hold.

Canada’s own cyber agency has already been saying the same thing in plainer language. The Canadian Centre for Cyber Security has warned that ransomware and AI-assisted tools are raising the risk to energy, food, transportation, health and water. It has published a dedicated assessment of the threat to Canadian water systems.

Ontario has not been immune. Southwestern hospitals lost systems for months after a 2023 ransomware hit on a shared IT provider. Peel District School Board was among the boards pulled into the PowerSchool breach. Smaller Ontario health units and clinics have reported incidents into 2026. None of that required “superintelligence.” It required old software, shared vendors and attackers who only needed one weak door.

AI changes the volume. Finding a 20-year-old bug, writing the exploit, and chaining it to leaked passwords used to take a skilled team. The letter’s point is that models can now do more of that work, at scale, for people who could not do it last year.

What the letter actually asks for

The companies are not calling for a pause on AI. They are calling for a surge on defense.

Every organization should treat cyber defense as a leadership issue, fix the highest-risk holes first, and raise the bar on software it buys or generates with AI.
Cyber vendors should test defenses against the newest models and make AI defense tools usable for hospitals and utilities, not just banks.
Governments should fund the services that cannot hire a 40-person security team, share threat intel, and get defensive AI into hospitals, water utilities and local governments.
Frontier labs should give trusted defenders access to their strongest models, plus training and monitoring so autonomous agents can be traced.

OpenAI is pushing its Daybreak cyber models for that last piece. Anthropic has Mythos. Microsoft has Perception. The tension is obvious: the same firms building more capable models are asking cities and hospitals to prepare for attacks those models will enable.

The Brampton piece

Brampton is not starting from zero. In June 2025 the City renewed a five-year, $5 million partnership with Toronto Metropolitan University to keep Rogers Cybersecure Catalyst in downtown Brampton. The Catalyst is sold as a training, research and startup hub for cybersecurity, tied to the Innovation District and to local employers in telecom, grocery, utilities and manufacturing.

That is a real asset. It is not the same as a guarantee that Brampton Civic’s booking systems, Peel’s treatment plants, or the City’s own network are ready for agentic attacks.

The letter’s own diagnosis is blunt: longstanding bugs, excessive permissions, unpatched software, weak authentication and “historic under-resourcing” of security around critical infrastructure. That is a description of a lot of Canadian municipal and hospital IT, not just Silicon Valley labs.

For residents, the practical questions are local:

Has City Hall made cyber defense a leadership item in the budget, not just an IT line?
Are Osler and Peel testing against current AI capabilities, or last year’s checklist?
Who gets the call at 2 a.m. if a water SCADA system or a hospital network starts behaving like an agent is walking it?
Does the Catalyst partnership actually reach the operators who run pumps and emergency departments, or only the startup pitch nights?

The letter says the window is months, not years. Brampton’s hospitals, water and city systems are the services that letter is talking about. The question for this council term is whether the city treats that as someone else’s problem in California, or as a Brampton file.

Source: OpenAI, A call for collective action on cyber defense, August 27, 2026. openai.com/collective-cyberdefense