Municipal Matters: Cybersecurity – Quiet work that keeps everyday services running

By Scott Giesbrecht on October 9, 2025.

Protecting what is valuable to us is instinctive in our day-to-day lives. We make sure our doors and windows are locked when we leave home, install security systems to protect our businesses, set car alarms to deter break-ins, and build fences around our properties. As the world becomes increasingly digital, that same protective instinct must extend to the online world.

Technology touches almost everything we do, from how we pay bills to how essential services are delivered. That makes protecting the digital realm just as important as locking the front door. This is where the City of Medicine Hat’s Cybersecurity teams come in.

Cybersecurity is how we keep our community’s information and public services safe in a digital world. The City’s Cybersecurity teams are responsible for protecting four key areas: systems (computers, phones, and servers), networks (from office Wi-Fi to the internet), data (from utility accounts to permit records), and operational technology (the systems that support public services such as electrical distribution, water treatment, traffic control, and more).

When bad actors manage to breach security measures, the consequences are tangible and potentially devastating. In 2024, the City of Hamilton, Ontario, suffered a ransomware attack that disrupted phone and email systems, property tax payments, and other municipal operations. More than a year later, Hamilton is still recovering, with recovery costs already at $18.3 million and counting. Similar stories across Canada end the same way: disruption and cost.

The City’s Cybersecurity teams deal with a range of threats every day. Phishing, the most common threat, uses deceptive emails or texts to trick people into clicking a link, opening an attachment, or entering a password, which can expose them to an attack or steal their login information. Ransomware is used by criminals to lock files and disrupt services. Business email compromise occurs when impostors pose as staff or vendors to redirect payments. Cybercriminals also use old passwords from public breaches in password reuse attacks, and incidents involving vendors can have ripple effects throughout municipal systems.

As technology evolves, so do the tactics of cybercriminals. Many organized cybercrime groups now operate like businesses, selling malicious products designed to help others bypass security measures. Criminals are also using artificial intelligence to write convincing, personalized messages that appear legitimate, or to mimic the voices of trusted colleagues to trick people into sharing sensitive information. In short, both the volume and sophistication of attacks continue to grow. This is why our filters, monitoring systems, and, most importantly, our people matter so much.

The City’s Cybersecurity teams work hard to protect data, systems, networks, and operational technology. They invest in tools, training, and partnerships to keep City information and infrastructure secure, while actively monitoring for potential threats. But cybersecurity is not just their responsibility, it’s everyone’s. All City of Medicine Hat staff play a key role in safeguarding our resources. Staff participate in ongoing cybersecurity training to stay informed and alert. On an average day, employees report about 19 suspicious emails, and roughly one-third turn out to be genuine attacks.

Cybersecurity is a team sport. The most powerful defence is people making good choices: taking a second look at an email, keeping software updated, and practising safe online habits. With everyone doing their part, the City of Medicine Hat keeps services reliable, protects privacy, and maintains the trust that underpins our community.

Scott Giesbrecht is co-ordinator cybersecurity, information technology with the City of Medicine Hat