Power Grid

Quebec municipal water plant — claimed NoName OT access

7 October 2025; disclosed 29 June 2026

Quebec, Canada (municipality undisclosed; province-level marker)

What happened

CSIRTAmericas alerted Canada's Cyber Centre to NoName's claim that it had obtained unauthorized access to a Quebec municipality's water-treatment systems, including the alleged ability to covertly control pumps, chlorine dosing, pressure settings and monitoring or alert functions. The Cyber Centre rapidly assessed the threat and coordinated mitigation with partners to reduce the public-safety risk. CSE did not name the municipality or report contamination, injury, service loss or malicious process changes. Reports identifying a particular town are therefore not repeated here, and the marker remains province-level and reported rather than treating every actor claim as confirmed fact.

When cited sources give different casualty, damage or spill figures for this event, they’re reported side by side above rather than merged into one number. See how confidence levels work.

Evidence
Reported / attributed
Confidence
Moderate
Infrastructure
Power Grid
Latitude
46.8100°
Longitude
-71.9800°

Attribution

Claimed by NoName

CSE's annual report describes the access and control capabilities as NoName's claim. It does not publicly identify the municipality, independently validate every claimed capability or attribute the group to a state in this incident.

Sources

  1. CSE Annual Report 2025–2026 — Unauthorized access to a Quebec water treatment plantCommunications Security Establishment Canada · Incident reporting