US Edition
Canada’s House of Commons Investigating Data Breach After Cyberattack
The breach exploited a critical Microsoft SharePoint flaw allowing unauthorized access to sensitive employee data, prompting heightened security alerts amid a sharp rise in cyberattacks, officials said.
- On Friday, August 9, 2025, the Canadian House of Commons experienced a cyberattack by an unidentified threat actor targeting its internal network.
- The threat actor exploited CVE-2025-53770 by leveraging advanced deserialization and ViewState abuse techniques, bypassing multi-factor authentication and single sign-on controls.
- Investigators found that compromised information included names, job titles, office locations, email addresses, and details of the House of Commons-managed computers and mobile devices.
- In response, the House of Commons warned employees and parliamentarians to be vigilant, while Canada’s Communications Security Establishment said it is supporting the investigation but cautioned attribution is difficult.
- Last Thursday, U.S. Cybersecurity and Infrastructure Security Agency issued an emergency directive on CVE-2025-53786, while Shadowserver reported over 29,000 unpatched Exchange servers in Canada.
12 Articles
12 Articles
Recent House of Commons Cyberattack Under Investigation
A recent cyberattack targeting the House of Commons is currently under investigation. “The House of Commons is working closely with its national security partners to further investigate this matter,” a spokesperson for the House of Commons told The Epoch Times in an Aug. 14 email. The spokesperson said the House of Commons cannot speak further about the incident at this time for “security reasons,” while investigations are still underway. Meanwh…
The House of Commons and a Canadian cybersecurity agency are investigating a major data theft that took place last Friday.
Unknown people have compromised the IT system of the Canadian House of Commons while gaining access to personal data from members of parliament. The incident is believed to be related to the current wave of attacks against Microsoft SharePoint installations. This emerges from an internal mail from the representatives of the parliament on Monday, which is available to CBC News. Sensitive government data are targeted According to the parliamentary…
Coverage Details
Bias Distribution
- 50% of the sources lean Left
Factuality
To view factuality data please Upgrade to Premium
