Canada's national anti-money laundering agency, the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC), disclosed on Tuesday that it has been dealing with a cyber attack over the past 24 hours. Assuring the public, FINTRAC clarified that the incident does not involve its intelligence or classified systems. However, as a precautionary measure, the agency has taken its corporate systems offline to safeguard their integrity and protect the information it holds.
In collaboration with federal partners, including the Canadian Centre for Cyber Security, FINTRAC is actively working to safeguard and restore its systems. Details regarding the nature and severity of the cyber attack remain undisclosed.
FINTRAC plays a crucial role in identifying, preventing, and deterring money laundering and the financing of terrorist activities while prioritizing the protection of personal information under its purview. Collaborating with law enforcement and financial regulatory agencies globally, even unclassified documents and emails managed by FINTRAC could be targeted by threat actors.
For instance, in its recent annual report, FINTRAC highlighted its assistance to police in Alberta with Project Cobra, resulting in significant drug seizures and multiple arrests. Additionally, the agency aided the RCMP in investigating fraudulent funds related to the Canada Small Business Financing Program. Moreover, in January 2023, FINTRAC initiated Project Anton, a unique international collaboration targeting illegal wildlife trade and enhancing the detection of associated money laundering activities.
Within Canada, FINTRAC provides essential financial intelligence to domestic law enforcement and national security agencies to combat money laundering, terrorist financing, and threats to national security. Internationally, it collaborates with counterparts such as the Russia-Related Sanctions and Illicit Finance Financial Intelligence Units Working Group.
Accountable to the Minister of Finance, FINTRAC's responsibilities include enforcing the Proceeds of Crime (Money Laundering) and Terrorist Financing Act. Various businesses fall under its regulatory scope, including federally regulated financial institutions, credit unions, insurance companies, casinos, accountants, mortgage administrators, and real estate brokers. These entities are mandated to report certain transactions and activities, including suspicious and large cash or virtual currency transactions, within 24 hours.
Moreover, FINTRAC possesses the authority to impose administrative monetary penalties on reporting entities found to be non-compliant with the act and its associated regulations.