-
The Communications Security Establishment (CSE) of Canada has taken action against foreign fentanyl supply chains by launching offensive cyber operations to interfere with them.
-
The CSE started a cyber campaign against a popular ransomware gang and has increased efforts to conduct cyber operations involving Russia, China, and the Arctic.
-
The agency is expanding at a fast pace, as its budget will be doubled and the staff strength is now over 4,000.
The Communications Security Establishment announced that it undertook offensive cyber activities against foreign criminals who distribute fentanyl. It is the first time that CSE has acknowledged completing a cyber attack on foreign producers of the highly lethal opioid drug.
The acknowledgment was contained in the agency’s 2025–26 Annual Report, which was published last Monday. The report provides insight into the application of cyber capabilities by Canada in addition to the collection of intelligence.
Cyber Operation Targets Fentanyl Chemical Brokers
According to the annual report, the CSE gathered foreign intelligence on criminals who brokered the trading of precursor chemicals. These chemicals are essential for making fentanyl. The brokers provided connections between suppliers and the criminal organizations responsible for making the synthetic opioid fentanyl.
After gathering information, the CSE launched a cyber attack to disrupt the network. The CSE stated that the operation “disrupted and diminished” the brokers’ ability to operate and also supported law enforcement during the effort.
The report does not identify the criminal groups, their home countries, or the specific techniques used. It also does not say when the campaign took place. These details remain classified.
The annual report notes that the CSE conducted three active cyber operations under ministerial authorization during the 2025–26 fiscal year. This matches the number approved the previous year.
Under Canadian law, such offensive cyber operations require the Minister of National Defence’s authorization. They also needed consent from the Minister of Foreign Affairs.
This is the first time the CSE has publicly confirmed completing an operation targeting the fentanyl supply chain. Its previous annual report had said the agency had “developed new campaigns” to target these networks. But it stopped short of confirming any executed operation.
Security experts say the disclosure offers an unusual look into Canada’s offensive cyber capabilities. Some of these attacks might include disrupting communications, disrupting financial transactions, or even preventing access to digital infrastructure that is being used by the criminals.
Agency Also Targets Ransomware Groups
This was not the only instance where an offensive cyberattack was mentioned in the report. According to CSE, they have worked with Five Eyes intelligence services during the operation. They also worked with law enforcement organizations in taking down ransomware as a service organization.
The collaboration reflects the growing trend of international cooperation against cybercrime. Indian police recently worked with other agencies to bust a dark web drug ring that was targeting students.
This group was responsible for more than 25 attacks on Canadian organizations. Victims of the group ranged from firms in transportation, health care, pharmaceuticals, and other sectors.
According to the agency, this campaign made the infrastructure of the group completely dysfunctional. Furthermore, it destroyed a huge chunk of stolen data that was put up for sale by threat actors. The report also says the CSE disrupted 10 other ransomware groups that have been causing serious harm to Canada and its allies.
Arctic and Foreign Threats Remain a Priority
The annual report also details how the CSE expanded its intelligence and cyber defense work in Canada’s Arctic over the past year. The agency cited growing activity by Russia and China in the region. This activity extends beyond military operations into economic influence and decision-making.
The report says sensors installed across government computer systems in Yukon, the Northwest Territories, and Nunavut are helping detect malicious cyber activity. The CSE also supported efforts to identify Russian sanctions evasion. Additionally, the agency helped Canada and its allies counter cyber espionage linked to China.
The agency’s budget and workforce are also growing rapidly. The CSE’s workforce grew by more than 8% over the past year, reaching 4,178 employees. They projected that the budget will exceed C$2 billion during the 2026–27 fiscal year. It could roughly double its funding from two years earlier.
The agency is preparing for further growth. Defence Construction Canada is planning a new building at CSE’s Ottawa headquarters. This project is expected to cost between C$150 million and C$300 million.
This investment reflects Canada’s increasing focus on cyber operations as threats from organized crime and hostile governments continue to grow.
