Cybercrime has been on the rise in Canada, with police-reported incidents growing from 1,785 in 2014 to 41,275 in 2023, showing a clear upward trend over the decade, according to Statistics Canada.
Preliminary data for the first six months of 2024 shows 41,162 incidents, suggesting a full-year total of about 82,324, nearly doubling the 2023 figure, which indicates a significant spike.
Projecting to 2025, using a historical growth rate of 41.7%, we estimate around 116,700 incidents, but a recent 100% growth rate suggests up to 164,648, reflecting uncertainty in future trends according to the National Cyber Threat Assessment 2025-2026.
Table of Contents
ToggleKey Takeaways
Historical Data on Police-Reported Cybercrime Incidents
Statistics Canada provides a detailed record of police-reported cybercrime incidents from 2014 to 2023, showing a consistent upward trend:
Recent preliminary data from Statistics Canada, released on October 23, 2024, reports 41,162 cybercrime incidents for the first six months of 2024. This figure, nearly matching the full-year total for 2023, suggests a significant increase.
Projecting for the full year of 2024, assuming similar activity in the second half, we estimate approximately 82,324 incidents. This represents a near doubling from 2023, which may indicate improved reporting, a spike in incidents, or changes in crime definitions.
Given the sharp rise in 2024, projecting for 2025 involves uncertainty. Using the historical average growth rate of 41.7%, the projected number for 2025 would be around 116,700 incidents (82,324 * 1.417).
However, considering the recent 100% growth from 2023 to projected 2024, an aggressive projection suggests 164,648 incidents (82,324 * 2). Given the variability, we propose a range of 116,700 to 164,648 incidents for 2025, acknowledging the potential for a moderated growth rate post-2024 spike.
Impact on Canadian Businesses
The 2023 Canadian Survey of Cyber Security and Cybercrime (CSCSC) provides detailed insights into business impacts:
16% of Canadian businesses were affected by cyber incidents in 2023, down from 18% in 2021, but still significant, especially for large businesses at 30%, according to The Daily.
Types of Incidents
- Financial Impact: Total spending on recovery from cyber incidents doubled to $1.2 billion in 2023 from $600 million in 2021, with prevention/detection spending reaching $11.0 billion, up from $9.7 billion in 2021. Large businesses accounted for approximately $500 million in recovery costs, medium businesses for $300 million, and small businesses for $300 million.
- Security Measures: Only 50% of businesses have dedicated cyber security employees (down from 61% in 2021), 26% have written policies (unchanged from 2021), and 22% have cyber risk insurance (up from 16% in 2021), covering direct losses (53%), restoration (44%), interruptions (39%), and financial losses (38%).
- Reporting Practices: 13% of impacted businesses reported incidents to police, up from 10% in 2021, with large and medium businesses at 16% and 15%, respectively, and small at 12%.
Impact on Individuals
โCybercrime is the most common cyber threat that Canadians and Canadian organizations are likely to encounter.โhttps://t.co/w8XaiAOPl4 pic.twitter.com/zIgQcKZEG0
โ Canadian Centre for Cyber Security (@cybercentre_ca) May 6, 2019
Reports indicate that over half of Canadians have encountered cybercrime at least once in their lifetime, reflecting the pervasive nature of these threats.
In 2021, the Canadian Anti-Fraud Centre reported approximately $100 million in losses due to online fraud, with investment scams and romance scams being the most common types. Investment scams often promise high returns and wealth.
Data breaches further exacerbate the issue, compromising personal information.
In Q3 2021, over 6.5 million user records were exposed due to breaches, though this number dropped significantly to 167,000 by Q1 2023, suggesting either improved security or underreporting, according to Statista.
Additional data from Madeinca notes that phishing attacks remain a top threat, with 1 in 5 Canadians receiving fraudulent emails daily. The emotional toll is also notable, with victims of romance scams reporting significant psychological distress alongside financial loss.
Metric
Statistic
Year/Source
Canadians Affected by Cybercrime
Over 50%
Lifetime (Made in CA, 2024)
Financial Losses to Fraud
~$100 million
2021 (Canadian Anti-Fraud Centre)
Common Fraud Types
Investment, Romance Scams
2021 (Made in CA)
Data Breaches (Records Exposed)
6.5 million
Q3 2021 (Statista)
Data Breaches (Records Exposed)
167,000
Q1 2023 (Statista)
Phishing Email Frequency
1 in 5 Canadians daily
2024 (Comparitech)
Cost of Cybercrime in Canada
The financial burden of cybercrime in Canada is substantial, aligning with global trends projecting cybercrime costs to reach $10.5 trillion by 2025.
Assuming Canadaโs GDP represents approximately 2.1% of the global economy, its share could be around $220.5 billion. More specific data from 2023 shows Canadian businesses spent $1.2 billion on recovery from cyber incidents, doubling from $600 million in 2021, with prevention and detection costs rising to $11.0 billion from $9.7 billion in the same period.
ย If cybercrime incidents double by 2025, as projected earlier (from 82,324 in 2024 to 164,648), recovery costs could climb to $2.4 billion. Individual losses, like the $100 million from fraud in 2021, and indirect costs (e.g., lost productivity) push the total higher, though exact figures remain elusive according to Cybersecurity Ventures.
Cost Category
Amount
Year/Source
Global Cybercrime Cost (Projected)
$10.5 trillion
2025 (Cybersecurity Ventures)
Canadaโs Estimated Share
~$220.5 billion
2025 (Proportional to 2.1% of global GDP)
Business Recovery Costs
$1.2 billion
2023 (Statistics Canada)
Business Recovery Costs
$600 million
2021 (Statistics Canada)
Prevention/Detection Spending
$11.0 billion
2023 (Statistics Canada)
Prevention/Detection Spending
$9.7 billion
2021 (Statistics Canada)
Projected Recovery Costs
$2.4 billion
2025 (Assuming doubled incidents)
Individual Fraud Losses
$100 million
2021 (Made in CA)
Key Threats and Trends
The National Cyber Threat Assessment 2025-2026 identifies ransomware as Canadaโs most disruptive cyber threat, particularly targeting critical infrastructure like healthcare and energy sectors.
State-sponsored actors from China, Russia, Iran, and North Korea leverage advanced tactics for espionage and disruption, while financially motivated cybercriminals dominate the landscape.
The rise of Cybercrime-as-a-Service (CaaS), including Ransomware-as-a-Service, enhances criminal resilience by lowering entry barriers.
In 2023, 13% of affected businesses faced ransomware, with recovery often costly. Budget 2024โs $917.4 million investment in cyber operations reflects a proactive response, funding RCMP efforts, military defenses, and public education. Emerging threats, like AI-driven attacks, are also noted as growing concerns for 2025.
Threat/Trend
Detail
Year
Top Threat
Ransomware
2025-2026ย
Targeted Sectors
Critical Infrastructure
2025-2026ย
State-Sponsored Actors
China, Russia, Iran, N. Korea
2025-2026ย
Cybercrime-as-a-Service (CaaS)
Ransomware-as-a-Service
2025-2026
Businesses Hit by Ransomware
13%
2023ย
Government Funding
$917.4 million
2024 Budgetย
Emerging Threat
AI-Driven Attacks
2025-2026