Commission de la construction du Québec: Personal information compromised as Quebec construction commission hit by cyberattack

Quebec Construction Commission Hit by Cyberattack, Personal Data Compromised

On August 24, the Commission de la construction du Québec (CCQ), the regulatory body overseeing Quebec’s construction industry, suspended its online services after detecting a cybersecurity incident, later confirmed as a cyberattack. The CCQ’s digital platforms, which allow users to access documents and conduct transactions, remained offline as investigations progressed.

By September 4, a spokesperson for the CCQ, Noémia L’Heureux-Daigneault, confirmed that the attack had resulted in the compromise of personal information belonging to clients and employees. The full extent of the breach remains under investigation. The CCQ expects its online and telephone services to resume on September 8, though no details were provided on the nature of the attack or the specific data exposed.

The incident highlights the growing cybersecurity risks faced by public sector organizations, particularly those handling sensitive personal and professional data. The CCQ has not disclosed whether the attack involved ransomware, data exfiltration, or other malicious tactics. Further updates are pending as the investigation continues.

Source: https://montrealgazette.com/news/personal-information-compromised-as-quebec-construction-commission-hit-by-cyberattack/

Commission de la construction du Québec cybersecurity rating report: https://www.rankiteo.com/company/commission-de-construction-du-quebec

"id": "COM1788553455",
"linkid": "commission-de-construction-du-quebec",
"type": "Cyber Attack",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Clients and employees',
                        'industry': 'Construction',
                        'location': 'Quebec, Canada',
                        'name': 'Commission de la construction du Québec (CCQ)',
                        'type': 'Government/Regulatory Body'}],
 'data_breach': {'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Personal information'},
 'date_detected': '2024-08-24',
 'date_publicly_disclosed': '2024-09-04',
 'description': 'The Commission de la construction du Québec (CCQ) suspended '
                'its online services after detecting a cybersecurity incident, '
                'later confirmed as a cyberattack. The attack resulted in the '
                'compromise of personal information belonging to clients and '
                'employees.',
 'impact': {'data_compromised': 'Personal information of clients and employees',
            'downtime': 'From 2024-08-24 to 2024-09-08 (expected)',
            'identity_theft_risk': 'High',
            'operational_impact': 'Suspension of online and telephone services',
            'systems_affected': 'Online services and digital platforms'},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'News Article'}],
 'response': {'containment_measures': 'Suspension of online services',
              'recovery_measures': 'Expected resumption of services on '
                                   '2024-09-08'},
 'title': 'Quebec Construction Commission Cyberattack',
 'type': 'Cyberattack'}