Ciro Responds to Cybersecurity Threat, Member Data Possibly Affected

The Canadian Investment Regulatory Organization (Ciro) has disclosed that it temporarily shut down parts of its systems last week after identifying a cybersecurity threat. The incident, detected on 11 August, prompted a proactive shutdown of certain systems while allowing critical operations, including real-time equity market surveillance, to continue uninterrupted.

While the regulator stressed that its key oversight functions remained in place, it confirmed that some personal information from member firms and their registered employees may have been exposed. The scope of the impact has not yet been fully determined, and investigations are ongoing.

"Given the high standard of security that Ciro expects of both itself and its members, we are deeply concerned about this, and know our members will be too," the organization said in a public statement.

Ciro is working with external cybersecurity experts, legal advisers, and law enforcement agencies as part of its response. The regulator added that it is prioritizing transparency while balancing the need to protect sensitive details of the investigation.

As Canada's national self-regulatory body for investment dealers and mutual fund dealers, Ciro oversees compliance in the securities industry and is tasked with maintaining market integrity. The organization has not disclosed the specific nature of the cybersecurity threat or how the breach was detected.