Calgary Public Library cyberattack disrupts services, no sensitive data compromised

The Calgary Public Library (CPL), a public library system serving Calgary, Alberta, Canada, reported that a cyberattack on October 11 compromised its servers, but no business, employee, or member data was accessed.

Following the incident, CPL closed branches early and implemented containment procedures, which remain in place and affect several library services. While CPL suspects the attack was an attempted ransomware breach, monitoring systems are believed to have successfully blocked the threat, and no contact was made with the attackers.

CPL CEO Sarah Meilleur highlighted that the response to the attack, aided by CPL’s technology team, cybersecurity partners, and Microsoft Incident Response, has been swift and thorough. “The safety of systems and data remains the highest priority as we move forward in our recovery,” Meilleur stated, commending the team’s effective response. “It is important to know that a cyber breach is difficult to prevent. The response makes the difference, and our team acted purposefully to ensure the breach was halted as effectively as possible.”

Branches reopened on October 16, but services remain limited. Critical technology-based services are currently unavailable, including digital library access, online booking, and virtual programs. CPL has paused digital services and extended due dates for borrowed materials until normal operations resume.

A staged recovery plan is underway. The initial phase involves restoring secure network communications across CPL’s 23 locations. In the second stage, select digital services will return, followed by the third stage, which aims to restore full technology access.