Facing cybersecurity threats, Quebec shuts down government websites for evaluation

Quebec will be shutting down close to 4,000 government websites following the threat of an international cyberattack on a widely used logging system.

Some 3,992 provincial government websites could be at risk, including those related to health, education and public administration, according to ric Caire, Quebec's minister for government digital transformation.

At a news conference on Sunday,Caire said there is no indication the government was the victim of a successful cyberattack, and he called the decision to haltaccess to public-facing websites a "preventative measure."

"We were facing a threat with a critical level of 10 out of10," he said. "According to the new protocols bythe head of governmentinformation security, [that rating]automatically calls for theclosure of the targeted systems."

Caire said the at-riskwebsites, which use the Apache Log4j logging library, are being inspected and will become available to the public once they are cleared of vulnerabilities.

The ClicSant portal used to book COVID-19vaccine appointmentsin the province does not use the compromised logging system, so the website remains accessible.

Prevention mode

Although the number of targetedwebsites is in the thousands, Cairesays the public can expect mostto return online fairly quickly because they aren't all highly solicited.

Detecting the vulnerability in awebsiteis ashort process, but without an inventory, he says,verifying whether all of the websitesuse the affected librarycould take several days.

"It's like saying how many rooms in allQuebec government buildings use 60-wattlight bulbs," he said. "I don't know, so you go to each room and see if it's a 60-watt."

Eric Parent, acybersecurity specialist and the CEO and founder of EVA Technologies, says the government's systematic approach is a strategy every cybersecurity expert would recommend.

"We've also seen attackers exploit [the vulnerability] in various parts of the world, which means they're ready to use it," he said.

"The best scenario is to turn everything off and reset every system as you know that they're OK."

The province joins the Canada Revenue Agency, which put its online service on hold Friday after it learned of a "security vulnerability affecting organizations around the world."