EN 
The pandemic has shifted more and more of what we do online. Cybercriminals have followed.
In a global health crisis that most of us—countries, businesses and individuals—saw as a challenge, cybercriminals saw opportunity. Early on in the pandemic, the World Health Organization experienced a fivefold increase in cyberattacks, as criminals stole WHO employees’ credentials to spread misinformation and thwart its efforts to respond to the crisis. Since then, cybercriminals have targeted the global race to develop a vaccine, targeting drug-development research with the apparent aim of profiting from other countries’ intellectual property.
While interfering in a global health crisis is especially troubling, cybercrime doesn’t stop there. According to the Canadian Centre for Cybersecurity, it’s a major threat to all Canadians and businesses, to our infrastructure and to our public institutions. And it’s on the rise. In the year after a Canadian federal data-breach reporting law went into effect on Nov. 1, 2018, the Office of the Privacy Commissioner of Canada received 680 breach reports affecting some 28 million Canadians. That was before the pandemic forced even more of our work, commerce and learning online.
It’s a subject that preoccupies privacy expert and recent Disruptors guest Ron Deibert.
Listen on Apple Podcasts, Spotify or Simplecast
He says we live in “a personal surveillance data economy,” where the large tech platforms wield unprecedented control over our data and don’t do enough to protect us from abuses of power. Deibert founded the Citizen Lab at the University of Toronto’s Munk School of Global Affairs and Public Policy, and is the author of Reset: Reclaiming the Internet for Civil Society.
Data protection is on the minds of business executives and owners too. Large companies are increasingly targets of costly ransomware attacks. What’s clear is that, with cybercriminals following the money and our behaviour during the pandemic, they need to prioritize data protection. Here’s some of what to think about:
Cybercriminals are becoming more sophisticated
Commercial espionage is growing, and some of it is conducted by powerful state-sponsored actors. The level of sophistication is notable. Cybercriminals have created illegal online markets to share their tools and talent, according to the Canadian Centre for Cyber Security. That puts the onus on businesses to beef up technology tools to proactively identify potential risks.
Many companies aren’t prepared for a breach
There isn’t a strong understanding of how scams work and what makes us most vulnerable, according to RBC Chief Information Security Officer Adam Evans. “Education needs to be the focus right now,” he says.
Businesses need updated policies and a crisis plan
Larger organizations are more likely to be targets, but they have more resources at their disposal to protect themselves against cybercrime. For smaller firms with more limited resources, it could be especially important to develop a written policy to manage or report cyber security incidents. Recommendations from the Canadian Centre for Cybersecurity include developing an incident response plan with detailed responsibilities, and considering purchasing a cyber security insurance policy that includes liability coverage.
Governments are boosting regulation
Canada’s federal government recently unveiled a bill to improve digital privacy protection in Canada. The Digital Charter Implementation Act will empower Canadians with freedom to securely move their data from one organization to another, and give them the ability to demand that their information be destroyed. Non-compliant companies will face strong financial penalties.
This article is intended as general information only and is not to be relied upon as constituting legal, financial or other professional advice. The reader is solely liable for any use of the information contained in this document and Royal Bank of Canada (“RBC”) nor any of its affiliates nor any of their respective directors, officers, employees or agents shall be held responsible for any direct or indirect damages arising from the use of this document by the reader. A professional advisor should be consulted regarding your specific situation. Information presented is believed to be factual and up-to-date but we do not guarantee its accuracy and it should not be regarded as a complete analysis of the subjects discussed. All expressions of opinion reflect the judgment of the authors as of the date of publication and are subject to change. No endorsement of any third parties or their advice, opinions, information, products or services is expressly given or implied by Royal Bank of Canada or any of its affiliates. This document may contain forward-looking statements within the meaning of certain securities laws, which are subject to RBC’s caution regarding forward-looking statements. ESG (including climate) metrics, data and other information contained on this website are or may be based on assumptions, estimates and judgements. For cautionary statements relating to the information on this website, refer to the “Caution regarding forward-looking statements” and the “Important notice regarding this document” sections in our latest climate report or sustainability report, available at: https://www.rbc.com/our-impact/sustainability-reporting/index.html. Except as required by law, none of RBC nor any of its affiliates undertake to update any information in this document.