Reported ransomware attacks in Calgary dropped 41% last year

The number of reported ransomware attacks have dropped in Calgary and across the country — but people who document those attacks warn that extortions are still draining thousands of dollars from victims. 

Calgary police say that through the calendar year of 2022, there was a 41 per cent drop in ransomware attacks reported to CPS compared to 2021.

Ransomware is a form of malicious software used by hackers to take control of a victim's computer or network, demanding payment in exchange for decryption. 

Last year, there were 13 reported ransomware cases to CPS, and 22 the year prior. However, a police spokesperson noted that cybercrimes are notoriously underreported. 

Ritesh Kotak, a cybersecurity and tech analyst based in Toronto, said people know a lot more about ransomware, and are investing more in cybersecurity than they used to, which may be the reason for lower reported numbers. 

"Just think about where we were five years ago compared to today. It's clear that these types of attacks are having huge impacts on society. We're continuously talking about them," Kotak said. 

"Organizations realize now that it's very expensive to recover from these attacks. And as a result, companies are becoming more proactive than reactive. And I think that's indicative in a sense that cybersecurity is no longer a checkbox exercise." 

Kotak said there has been a long-standing protocol not to pay ransomware, which can reduce future extortion.

Nationally, revenue for ransomware attacks has increased year-over-year, but the number of reported victims has fallen. According to figures reported to the Canadian Anti-Fraud Centre (CAFC), there were 66 victims of ransomware in 2022, compared to 104 in 2021. 

But despite fewer reported attacks, victims lost more — totalling $474,439 in 2022 and $346,195 the previous year, data from CAFC said. 

Jeff Horncastle, acting communications and client outreach officer at the Canadian Anti-Fraud Centre, said a devastating ransomware attack could come from a simple phishing message. 

"If we look at 66 victims and nearly half a million lost — very costly for victims of ransomware," he said. 

He added that people are "absolutely" more aware of ransomware prevention strategies than in the past. 

"Education and prevention is the best way to combat this. We have to stay on top of what techniques fraudsters are using, what methods they're using, because they're going to use technology to their advantage and we have to know what that technology is to be able to protect ourselves."