Charles Finlay, executive Director of the Roger CyberSecure catalyst at Toronto Metropolitan University, says ransomware attacks often involve leveraging illegally collected sensitive information for money. A recent attack on five Ontario hospitals has led to health information being published publicly on the dark web, for instance. But that’s not the only goal, he says.

Sometimes, attackers simply ransom control of an institution’s digital infrastructure, Finlay says. Without knowing the full scope of the situation, he says he believes that’s likely the case here.

“In Canada and around the world right now, it is a multi-billion dollar criminal industry that is highly resourced, it’s highly innovative, and is, unfortunately, highly profitable for the ransomware gangs that launch these attacks.”