{"id":843330,"date":"2026-08-02T23:48:09","date_gmt":"2026-08-02T23:48:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/ca\/843330\/"},"modified":"2026-08-02T23:48:09","modified_gmt":"2026-08-02T23:48:09","slug":"targeting-the-taps-why-foreign-hackers-are-striking-quebecs-water-plants","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ca\/843330\/","title":{"rendered":"Targeting the taps: Why foreign hackers are striking Quebec’s water plants"},"content":{"rendered":"

\"Text<\/p>\n

Listen to this article<\/p>\n

Estimated 4 minutes<\/p>\n

The audio version of this article is generated by AI-based technology. Mispronunciations can occur. We are working with our partners to continually review and improve the results.<\/p>\n

For the mayor of Saint-No\u00ebl \u2013 a municipality of fewer than 400 residents in Quebec\u2019s Bas-Saint-Laurent region \u2013 watching a video of hackers playing around with the computer system of the local drinking water treatment station was surprising at first \u2013\u00a0 then angering.\u00a0<\/p>\n

\u201cFor Saint-No\u00ebl to get hacked by people in Russia, it\u2019s funny, and it\u2019s not,\u201d said Gilbert Marquis.<\/p>\n

The video was posted on July 24 on the Telegram account of a group called Z-Pentest Alliance. In it, upbeat music plays over the screen recording of a computer interface, the French inscription at the top reading \u201cSt-Noel drinking water.\u201d A cursor is seen adjusting chlorine dosage settings.<\/p>\n

The mayor insists that water quality wasn\u2019t affected.\u00a0<\/p>\n

\u201cFortunately, the plant went into safe mode, on standby. So, the drinking water wasn\u2019t contaminated,\u201d Marquis said.\u00a0<\/p>\n

He added that the hackers didn\u2019t gain access to citizens\u2019 sensitive information because the facility\u2019s network isn\u2019t connected to anything else.<\/p>\n

After several similar attacks in the United States, the country\u2019s Cybersecurity and Infrastructure Security Agency issued an advisory in 2025<\/a>, warning that pro-Russia hacktivists were conducting opportunistic attacks on critical infrastructure in the U.S and globally, listing Z-Pentest Alliance and NoName057(16) as some of the groups with suspected links to Russia\u2019s military intelligence agency.<\/p>\n

WATCH | Small Quebec municipality targeted in cyberattack:\"\"<\/p>\n

Why would Russian hackers target a water treatment plant in eastern Quebec?<\/p>\n

The water treatment plant is located in Saint-No\u00ebl, a small municipality of fewer than 400 residents in eastern Quebec. Its mayor, Gilbert Marquis, says the hackers didn\u2019t access any sensitive information and the water remains potable.<\/p>\n

A Canadian federal agency also documented a hacking incident in another Quebec<\/a> water treatment plant last year, without disclosing an exact location. According to the report, NoName claimed to be behind the attack.<\/p>\n

The\u00a0 Canadian Centre for Cyber Security<\/a> explained, in a recent report, that water systems are almost certainly a strategic target for state-sponsored actors to demonstrate force through disruptive cyberthreats.<\/p>\n

Targeting \u201clow-hanging fruit\u201d to gather Canadian intel<\/p>\n

While problems at the plant in Saint-No\u00ebl were detected and addressed immediately by a municipal employee, it was cybersecurity expert Steve Waterhouse, who flagged the issue was linked to a cyberattack.\u00a0<\/p>\n

Waterhouse has served as an information security officer at the Department of National Defence and as assistant deputy minister at Quebec\u2019s Cybersecurity Ministry. He currently provides cybersecurity guidance to small and medium-sized businesses.<\/p>\n

\u201cIn my practice, I go about and look at international events, especially those that are affecting Canada and Quebec,\u201d he says. \u201cThis one popped up immediately.\u201d\u00a0<\/p>\n

Waterhouse says he reached out to the authorities, including government agencies and police, after discovering two messages posted by the Russian group. <\/p>\n

He says one of the posts indicated that hackers had also breached an oil and gas facility elsewhere in the country, saying they were on a mission to work against Canada. <\/p>\n

Certified cybersecurity and privacy expert Claudiu Popa says there are multiple reasons for international groups to target municipal-level governments, which can have weaker cybersecurity. <\/p>\n

For one, it can be about self-promotion: if they plan to sell their services to foreign governments \u2013 it\u2019s a way for them to show that they can hack into state systems.<\/p>\n

\u201cIn other cases, it’s just for information gathering. This is a great way to gather up intel at the municipal level so that they can apply those lessons learned at the provincial or even the federal level,\u201d Popa said.<\/p>\n

Both Popa and Waterhouse believe the federal government should standardize and implement cybersecurity protocols across all levels of government.<\/p>\n

\u201cOtherwise hackers will continue to choose the low-hanging fruit and harm those communities potentially (…) or introduce the threat of terrorism which is obviously very, very significant here in our country,\u201d Popa says.<\/p>\n

CBC reached out to Public Safety Canada for comment but did not get a response by deadline.<\/p>\n","protected":false},"excerpt":{"rendered":"Listen to this article Estimated 4 minutes The audio version of this article is generated by AI-based technology.…\n","protected":false},"author":2,"featured_media":843331,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[49,48,295,66],"class_list":["post-843330","post","type-post","status-publish","format-standard","has-post-thumbnail","category-environment","tag-ca","tag-canada","tag-environment","tag-science"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/843330","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/comments?post=843330"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/843330\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media\/843331"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media?parent=843330"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/categories?post=843330"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/tags?post=843330"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}