unknown attacks National Gallery of Canada

Incident Date:

May 9, 2023

World map



unknown attacks National Gallery of Canada


National Gallery of Canada




Ottawa, Canada

Ontario, Canada

First Reported

May 9, 2023

National Gallery of Canada Ransomware Attack Update

The National Gallery of Canada is still working on recovering full functionality in the wake of a ransomware attack it suffered three weeks ago.

“We have begun a gradual return to the office,” director of communications Douglas Chow told Artnet News. “Progress and connectivity by department continues, most recently online systems for ticketing, membership, and the boutique are now operational.”

Investigation Underway

The Canadian Centre for Cyber Security and third-party cybersecurity experts are currently carrying out a forensic investigation.

Impact of the Attack

Museum staff first detected the attack following an interruption to its IT systems on April 23rd, reportedly losing some “operational information.” It has stressed that payments systems were not affected and no private information had been stolen.

“We have taken this incident very seriously,” said interim director and CEO Angela Cassie. “Our core focus was on protecting personal or sensitive information, and the safe operation of the gallery.”

The museum informed membership applicants about the attack on May 9th.

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.