--- description: Data security in Canada faces growing threats as AI enhances the tools available to cyberattackers. Learn how IT professionals are prioritizing for 2025. image: https://gdm-localsites-assets-gfprod.imgix.net/images/getapp/og_logo-94fd2a03a6c7a0e54fc0c9e21a1c0ce9.png title: Biggest worries in Canada data security for IT professionals --- # AI-enhanced malware and phishing worry Canadian IT pros most for 2025, learn four ways to get secure Canonical: https://www.getapp.ca/blog/7229/canada-data-security-worries-it-professionals Published on 2024-10-18 | Written by David Jani. ![AI-enhanced malware and phishing worry Canadian IT pros most for 2025, learn four ways to get secure](https://images.ctfassets.net/63bmaubptoky/1kTiN9D6ax7PCwY3l1aRdL/3ed026357602e159bb50815f3dbb2ff2/10-GA-INTL-Header-Growing-data-privacy-and-security-concerns-1200x630-DLVR-DE.jpg) > GetApp’s data security report analyzes the risks facing data security over the coming twelve months and how to get ahead of them. Among the major worries are the effects artificial intelligence (AI) could have in boosting common threats. ----- ## Article Content GetApp’s data security report analyzes the risks facing data security over the coming twelve months and how to get ahead of them. Among the major worries are the effects artificial intelligence (AI) could have in boosting common threats.In this articleAI threats are the top worry for Canadian IT pros in 2025Ransomware and phishing continue to threaten data securityData breaches are below the global average, but caution is still needed4 cybersecurity measures for safer, more secure data in 2025Now is the time to prepare for the threats looming in 2025IT professionals in Canada are raising major worries about the likelihood that artificial intelligence (AI) enhancements will lead to powered-up data security threats such as malware and phishing over 2025. These were among the key results highlighted by GetApp’s 2024 Data Security Survey, which analyzed the answers of 4,000 participants from 11 countries, of which 350 were from Canada.\*AI enhancements to known threats are still relatively novel, yet they present a clear threat to data security in Canada. The prevalence of AI-powered attacks is expected to grow over the next 12 months, making this a crucial time to shore up data governance, security systems, and database infrastructure and configuration. In this article, we look at these threats in greater detail and provide four key guidelines businesses can use to ring-fence and enhance their data security for 2025. Key insightsAI-enhanced attacks are the biggest data security threats for 2025, according to 38% of our Canadian sample60% say AI-enhanced malware is the top AI threat for Canadian businesses in 202553% experienced a data breach in Canada in the last 12 months, compared with 62% globally42% of data breaches in Canada were caused by software vulnerabilitiesAI threats are the top worry for Canadian IT pros in 2025Easy-to-access AI tools are impacting many elements of technology and security. These tools empower cybercriminals to create new attacks faster and discover software vulnerabilities more easily. This is also changing the game for threat intelligence as existing forms of attacks, like phishing and malware, get an upgrade, making them harder to detect, better at finding vulnerabilities, and more pervasive.    Our analysis shows this evolving scenario is heightening worries across the data security landscape in Canada. The biggest concern among the surveyed Canadian IT professionals for the next 12 months is AI-enhanced attacks. This seems to be especially feared nationally, with 38% identifying it as their main worry. By comparison, only 36% globally chose this option.The concern focused on AI sits above other issues highlighted, although elements such as advanced phishing, ransomware, and cloud-based vulnerabilities also figure as threats professionals take seriously. However, it is notable that phishing and ransomware are seen as the two areas where AI enhancements could pose the most risk. It is also worth noting that Canadians are more likely to express concern about deepfakes, demonstrating an increased wariness about new, evolving attacks. Preparing for such developments will also be integral to properly preparing to face the risk of AI cyberattacks on data systems but are Canadian businesses ready for it? Canadian organizations unprepared to fight against AI's impact on cyberattacksIt’s not just our sample that is sounding the alarm on the risk of AI in the coming years. Experts from across Canada are warning of the ways that AI is making it easier to commit cyberattacks by giving hackers more tools to target vulnerabilities and speed up attacks following big incidents affecting federal organizations. \[1\]This impetus for action is echoed by a recent report from the Canadian Internet Registration Authority (CIRA) warning that Canadian businesses still need to prepare more to deal with AI cyberthreats. It highlights some of the significant costs that businesses face, such as ransoms and a loss of revenue, and calls for more businesses to create dedicated AI policies in response. \[2\]Ransomware and phishing continue to threaten data securityLooking at the current picture, phishing, and ransomware already pose a significant risk to company data, and successful attacks are still a major issue for Canadian businesses. AI is likely to make ransomware and phishing more difficult to combat; however, there is already much that can be done to counteract these threats.Most of our sample are aware of phishing attempts targeting their business. In the last 12 months, the vast majority (89%) of Canadian respondents received or know of a colleague receiving a phishing email. Worse still, 73% reported that they or a fellow staff member had also clicked on the malicious link in the phishing email.Ransomware also continues to prove problematic in Canada, with 42% of our sample observing one or more cyberattack incidents at work in the last year. Whilst such attacks can greatly harm data security, many businesses were able to recover effectively. Our data set analysis shows that 35% of the surveyed businesses could recover from the attack without paying any ransom or losing data.However, it is still wise to be vigilant, as results might not always be as desired. In 20% of cases, the ransom was paid, and the data returned, but in exactly the same number of incidents (20%), the data was not retrieved even after paying the money demanded. This underscores where preemption and preparation are especially important with existing attacks, especially when they could grow more deceptive and effective in the coming years.Rampant ransomware in the public sector drives reformYou’ve probably read reports this year about the havoc ransomware attacks in Canada can play on infrastructure, such as the incident that hit Hamilton in March 2024. \[3\] Ransomware is harmful to victims due to the costs it causes to businesses paying the ransom and the disruption to operations during incidents. It can have a lingering effect on the business’s reputation in the long term.This is leading some parts of Canada to call for new legislation to ensure better protection of vital services. For instance, Ontario plans to introduce new laws to regulate cybersecurity in essential sectors such as health and education. \[4\] Data breaches are below the global average, but caution is still neededCanada appears to be faring better than some of the other countries surveyed. Despite 53% nationally suffering data breaches in the last 12 months, this compares well against the global average of 62%. Nevertheless, data breaches still affect over half of the Canadians we surveyed, and cases remain high in the country. Our sample identified software vulnerabilities as the top cause of breaches, although common issues such as malware and social engineering also cause a significant number of breaches.4 cybersecurity measures for safer, more secure data in 2025According to our research, a significant proportion of Canadian firms (53%) are still falling victim to data breaches. This comes at a time when worries are raised about more targeted and frequent attacks. New threats could drive up the rate of cyberattacks and data breaches in the coming year. To help keep things secure, we’ve leveraged our data to highlight four important tips to promote security and stability for Canadian firms into 2025. Don’t skimp on security fundamentalsIt’s vital to ensure basic protections for network security are covered before worrying about more advanced protection considerations. For example, the three most used security tools in our sample data are firewalls, antivirus, and data backup software, which will surprise very few people While these tools are well-established and fairly encompassing, it is important to use security software with features that make it more adept at dealing with upcoming threats. This may mean using a program with robust malware detection tools and one that also updates its software frequently to address the threat of AI-powered malware and other emerging issues with cloud security more directly.Check for gaps in your data securityWith AI attacks likely to present a major challenge in the coming months, it’s important to make sure data security protocols are safely in place and network monitoring is robust. As seen in our findings, 34% of data breaches occurred due to an improperly configured database or errors in the system. This makes regular checks of system integrity a priority.   The need to review overall data security also represents the biggest priority for over half (53%) globally. This makes sense, especially in situations where vulnerabilities can become wider due to the existence of AI-generated cyberthreats. It also goes without saying that encryption can greatly benefit data security professionals by ensuring data is only readable by authorized individuals. Therefore, in the event it is stolen or breached, it will be unreadable and functionally useless. While most forms of artificial intelligence, such as deep learning, can’t break encryption, AI-powered attacks can make stolen data a bigger risk in the first place. \[5\] Using encryption methods is a small step to preventing data from being misused if the worst happens.Prioritize threat simulationCybersecurity protection tools offer a good level of defence against data thieves and cyberattackers. However, these tools aren’t foolproof, and sometimes threats slip through the cracks. Therefore, it is vital to create a level of preparedness within an organization to spot attacks.Our data showed that 67% of Canadian workers belong to businesses that simulate phishing attacks (below the global average of 70%) to improve data security. These exercises can enhance email security by promoting awareness of the signs of social engineering attacks before they can do any damage. This practice can also identify the extent to which extra cybersecurity awareness training should be conducted across an enterprise.Previous research has identified positive feedback on phishing awareness training. For instance, in GetApp Canada’s 2023 Phishing Attacks survey, 55% of employees who took phishing awareness training said it taught them to spot, avoid, and report phishing attempts. Businesses can prioritize this area now, especially to prepare for the risks of stronger phishing attempts in the coming months.Strengthen defences with multi-factor authentication Multi-factor authentication (MFA) can be a game-changer in preventing an attack. It multiplies the opportunities to thwart a potential incident and prevent a data breach or takeover of a system by a hacker. Therefore, it was a little surprising to note that only 36% of Canadian IT and data professionals surveyed said that their companies use MFA for all applications, compared with a global average of 44%. MFA however, is something businesses can do now to try and steal a march on possible attempts to compromise their systems. Using a system that employees find most comfortable could be a good way to enforce multi-step protection practices more smoothly.  Interestingly, Canadian respondents appear to prefer MFA options that authenticate access via a passcode, received on a mobile device, by email, or found on a dedicated authentication app. Biometrics appear to be considerably less popular.  These findings may have been compounded by worries about the risks of AI breaking the defence of biometrics. In GetApp’s 2024 Executive Cybersecurity survey, for example, we observed high fears in Canada about the potential for biometrics to be compromised by AI-generated fraud as well as a lower rate of use compared to other countries surveyed.Now is the time to prepare for the threats looming in 2025The findings of our survey don’t necessarily paint a rosy picture of the threats facing data security in the coming year. However, there is still time to prepare. It is essential to anticipate the threat of AI attacks that could circumvent existing security and work on strengthening protections.It’s important to realize that AI is not simply an enemy. It can also be an ally in the fight against cybersecurity breaches. In our second report, we investigate the benefits AI can bring to Canadian data security more directly. Looking for data governance software? Check out our catalogue. ## Disclaimer > Survey methodology\*GetApp’s 2024 Data Security Survey was conducted online in August 2024 among 4,000 respondents in Australia (n=350), Brazil (n=350), Canada (n=350), France (n=350), India (n=350), Italy (n=350), Japan (n=350), Mexico (n=350), Spain (n=350), the U.K. (n=350), and the U.S. (n=500) to learn more about data security practices at businesses around the world. Respondents were screened for full-time employment in an IT role with responsibility for, or full knowledge of, their company's data security measures.Sources:Cyber attacks are getting easier, experts warn after 3rd federal incident, Globalnews.ca Canadian organizations are unprepared for AI-driven cyber threats, CIRA Hamilton hit by ransomware attack, city says for 1st time since incident paralyzes services, CBC News Ontario proposes legislation to enhance cybersecurity in public sector, HRD Canada Could Deep Learning be used to crack encryption?, GeeksforGeeks ## About the author ### David Jani David is a Content Analyst for the UK, providing key insights into tech, software and business trends for SMEs. Cardiff University graduate. He loves traveling, cooking and F1. ## Related Categories - [Artificial Intelligence Software](https://www.getapp.ca/directory/1397/artificial-intelligence/software) - [Cloud Security Software](https://www.getapp.ca/directory/291/cloud-security/software) - [Cybersecurity Software](https://www.getapp.ca/directory/1035/cybersecurity/software) - [Network Monitoring Software](https://www.getapp.ca/directory/480/network-monitoring/software) - [Network Security Software](https://www.getapp.ca/directory/1443/network-security/software) ## Related Articles - [How can businesses utilize the potential of generative AI to drive growth?](https://www.getapp.ca/blog/4125/generative-ai-in-the-workplace) - [Will Canada embrace the metaverse in 2023?](https://www.getapp.ca/blog/3406/what-is-the-metaverse-canada) - [Digital reputation: How can SMEs reassure consumers about cybersecurity?](https://www.getapp.ca/blog/3629/digital-reputation-perceptions) - [Generative AI in video: How Canadian companies are using it](https://www.getapp.ca/blog/4144/generative-artificial-intelligence-video-creation) - [Data protection and the CPPA: What you need to know](https://www.getapp.ca/blog/2197/cppa-business-compliance-canada) ## Links - [View on GetApp](https://www.getapp.ca/blog/7229/canada-data-security-worries-it-professionals) - [Blog](https://www.getapp.ca/blog) - [Home](https://www.getapp.ca/) ----- ## Structured Data