Canada Names India As Major Cyber Threat

In a groundbreaking move, Canada has for the first time identified India as a significant cyberthreat in its latest National Cyber Threat Assessment for the years 2025-2026. India now finds itself among the top five countries considered adversaries in cyber space by Canada, following China, Russia, Iran, and North Korea. This inclusion marks a notable shift from previous assessments in 2018, 2020, and 2023-24, which did not mention India.

The report, produced by the Canadian Centre for Cyber Security, a division of the Communications Security Establishment Canada, sheds light on the diverse threats Canada anticipates from both state-sponsored groups and independent actors over the coming years.

The report accuses actors sponsored by the Indian state of engaging in espionage activities targeting Canadian government networks. Furthermore, it highlights cyberattacks on Canadian websites by a pro-India hacktivist group, triggered by allegations of India's involvement in the assassination of a Canadian citizen.

These revelations underscore the escalating cyber tensions between the two nations, amidst broader deteriorating diplomatic relations. The assessment suggests that India's endeavors to modernize its cyber program are motivated by national security goals, including espionage and counter-terrorism, possibly leveraging commercial cyber vendors to bolster its capabilities.

One of the key drivers of future cyber threats from India towards Canada, as identified in the report, will be the evolving bilateral relationship between the two countries. The report's findings come at a time of heightened tensions, notably following Canadian Prime Minister Justin Trudeau's allegation last year of the Indian government's involvement in the murder of Canadian Sikh activist Hardeep Singh Nijjar in June 2023 - a claim strongly rejected by India as unfounded.

The complexity of the international state cyber ecosystem is growing, with new cyber programs emerging from countries like India that pose a threat to nations such as Canada. These programs are not solely focused on addressing domestic threats and regional adversaries but are also used to surveil activists and dissidents outside their borders. The document points out the increasing involvement of geopolitically motivated hacktivists from countries including Russia and India, who carry out disruptive cyberattacks.

Amidst these developments, India's Ministry of External Affairs has vocally criticized the Canadian cyber threat assessment. Spokesperson Randhir Jaiswal condemned Canada's move to categorize India as a cyberthreat as part of an alleged Canadian strategy to malign India, dismissing the accusations as baseless. The diplomatic spat has led to significant moves, such as the expulsion of six Canadian diplomats from India and the withdrawal of key Indian diplomatic personnel from Canada. This action reflects the deepening rift between the two nations, exacerbated by Canada's accusation of Indian government complicity in Hardeep Singh Nijjar's murder and India's contention that Canada harbors pro-Khalistan elements.

Concluding, Canada’s National Cyber Threat Assessment for 2025-2026 has ignited a diplomatic firestorm by naming India among its top cyberthreats, a major departure from previous reports. This shift reflects growing concerns over espionage and cyberattacks amidst an already strained Canada-India relationship. The coming years will likely see continued cyber and diplomatic challenges as both nations navigate this tumultuous period.