Company Details
hydro-quebec
15,822
256,555
22113
hydroquebec.com
0
HYD_2380304
In-progress


Hydro Québec Vendor Cyber Rating & Cyber Score
hydroquebec.comHydro-Québec produit, transporte et distribue de l'électricité. Elle exploite essentiellement des énergies renouvelables, plus particulièrement l'hydroélectricité. Elle fait aussi de la recherche dans les domaines reliés à l'énergie et s'intéresse activement à l'efficacité énergétique. En outre, elle développe les technologies issues de ses recherches. Son unique actionnaire est le gouvernement du Québec. En vertu de la loi, le producteur fournit au distributeur un volume annuel d'électricité patrimoniale au-delà duquel le distributeur s'approvisionne sur les marchés dans un contexte de libre concurrence. Les activités de transport et de distribution sont réglementées. L'entreprise comprend quatre divisions : Hydro-Québec Production Hydro-Québec Production produit de l'électricité et la commercialise sur les marchés de gros au Québec et hors Québec. Hydro-Québec TransÉnergie Hydro-Québec TransÉnergie exploite le plus vaste réseau de transport d'électricité de l'Amérique du Nord pour le bénéfice de ses clients au Québec et hors Québec. Hydro-Québec Distribution Hydro-Québec Distribution assure aux Québécois un approvisionnement fiable en énergie. Au-delà du volume annuel d'électricité patrimoniale fourni par Hydro-Québec Production, elle s'approvisionne sur les marchés. Elle s'emploie à ce que ses clientèles fassent une utilisation efficace de l'électricité. Hydro-Québec Équipement et la Société d'énergie de la Baie James, filiale d'Hydro-Québec, sont les maîtres d'oeuvre des projets de construction d'Hydro-Québec Production et d'Hydro-Québec TransÉnergie.
Company Details
hydro-quebec
15,822
256,555
22113
hydroquebec.com
0
HYD_2380304
In-progress
Between 750 and 799

Hydro Québec Global Score (TPRM)XXXX

Description: A "denial of service" attack, which happens when a system is overloaded with unnecessary requests, was made against the website of Hydro-Quebec. The map of outages was one of the sites on Hydro's website that were still viewable. Unable to load were other pages, such as the Customer Space page. Also impacted was the Hydro-Quebec app. No critical Hydro-Québec systems were attacked and users' personal data was not compromised. The service is being restored by the cybersecurity team.


No incidents recorded for Hydro Québec in 2026.
No incidents recorded for Hydro Québec in 2026.
No incidents recorded for Hydro Québec in 2026.
Hydro Québec cyber incidents detection timeline including parent company and subsidiaries

Hydro-Québec produit, transporte et distribue de l'électricité. Elle exploite essentiellement des énergies renouvelables, plus particulièrement l'hydroélectricité. Elle fait aussi de la recherche dans les domaines reliés à l'énergie et s'intéresse activement à l'efficacité énergétique. En outre, elle développe les technologies issues de ses recherches. Son unique actionnaire est le gouvernement du Québec. En vertu de la loi, le producteur fournit au distributeur un volume annuel d'électricité patrimoniale au-delà duquel le distributeur s'approvisionne sur les marchés dans un contexte de libre concurrence. Les activités de transport et de distribution sont réglementées. L'entreprise comprend quatre divisions : Hydro-Québec Production Hydro-Québec Production produit de l'électricité et la commercialise sur les marchés de gros au Québec et hors Québec. Hydro-Québec TransÉnergie Hydro-Québec TransÉnergie exploite le plus vaste réseau de transport d'électricité de l'Amérique du Nord pour le bénéfice de ses clients au Québec et hors Québec. Hydro-Québec Distribution Hydro-Québec Distribution assure aux Québécois un approvisionnement fiable en énergie. Au-delà du volume annuel d'électricité patrimoniale fourni par Hydro-Québec Production, elle s'approvisionne sur les marchés. Elle s'emploie à ce que ses clientèles fassent une utilisation efficace de l'électricité. Hydro-Québec Équipement et la Société d'énergie de la Baie James, filiale d'Hydro-Québec, sont les maîtres d'oeuvre des projets de construction d'Hydro-Québec Production et d'Hydro-Québec TransÉnergie.

What if your next career adventure started with ENGIE? Joining ENGIE means being part of a company at the forefront of the energy transition, committed to accelerating the shift to a carbon-neutral economy. With 98,000 employees across 30 countries, ENGIE's operations cover the entire energy val

Siemens Energy is one of the world’s leading energy technology companies. The company works with its customers and partners on energy systems for the future, thus supporting the transition to a more sustainable world. With its portfolio of products, solutions and services, Siemens Energy covers almo
.png)
Hackers are using the Hydro-Quebec logo to defraud customers, according to a report by cybersecurity firm Flare.
By Frédéric Lacroix-Couture, The Canadian Press. Posted February 22, 2026 10:33 am. The number of artificial intelligence (AI) initiatives in Quebec's...
Sood, a longtime grocery executive, will replace Peter Gregg next month.
Hydro-Québec has been recognized for its pioneering work to build a sustainable, resilient, and innovation-driven future for Canada based on...
By Sidhartha Banerjee, The Canadian Press. Posted November 1, 2025 11:09 am. Faced with the threat of cyberattacks and limited budgets, Quebec nonprofits...
Facing the threat of cyberattacks and with limited budgets, non-profit organizations across Quebec are being offered free cybersecurity...
Ted Rogers School of Management professor Atefeh (Atty) Mashatan and Faculty of Engineering and Architectural Science professor Reza Arani...
After users in Ontario and Quebec reported a widespread outage of Bell Canada's services this morning, the company said an update triggered...
Cybersecurity threats to hydropower dams are becoming more frequent and severe, with attacks linked to state-backed actors from Iran, Russia, and elsewhere...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Hydro Québec is http://www.hydroquebec.com.
According to Rankiteo, Hydro Québec’s AI-generated cybersecurity score is 777, reflecting their Fair security posture.
According to Rankiteo, Hydro Québec currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Hydro Québec has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.
According to Rankiteo, Hydro Québec is not certified under SOC 2 Type 1.
According to Rankiteo, Hydro Québec does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Hydro Québec is not listed as GDPR compliant.
According to Rankiteo, Hydro Québec does not currently maintain PCI DSS compliance.
According to Rankiteo, Hydro Québec is not compliant with HIPAA regulations.
According to Rankiteo,Hydro Québec is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Hydro Québec operates primarily in the Renewable Energy Power Generation industry.
Hydro Québec employs approximately 15,822 people worldwide.
Hydro Québec presently has no subsidiaries across any sectors.
Hydro Québec’s official LinkedIn profile has approximately 256,555 followers.
Hydro Québec is classified under the NAICS code 22113, which corresponds to Electric Power Generation.
No, Hydro Québec does not have a profile on Crunchbase.
Yes, Hydro Québec maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hydro-quebec.
As of April 04, 2026, Rankiteo reports that Hydro Québec has experienced 1 cybersecurity incidents.
Hydro Québec has an estimated 398 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.
Detection and Response: The company detects and responds to cybersecurity incidents through an remediation measures with service restoration by the cybersecurity team..
Title: Denial of Service Attack on Hydro-Quebec
Description: A denial of service attack overloaded the website of Hydro-Quebec, making certain pages and the mobile app inaccessible. No critical systems or personal data were compromised.
Type: Denial of Service (DoS)
Attack Vector: Overloading the system with unnecessary requests
Common Attack Types: The most common types of attacks the company has faced is Cyber Attack.

Data Compromised: No
Systems Affected: Hydro-Quebec websiteHydro-Quebec app

Entity Name: Hydro-Quebec
Entity Type: Energy and Utilities
Industry: Energy
Location: Quebec, Canada

Remediation Measures: Service restoration by the cybersecurity team
Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Service restoration by the cybersecurity team, .
Most Significant Data Compromised: The most significant data compromised in an incident was No.
Most Significant System Affected: The most significant system affected in an incident was Hydro-Quebec websiteHydro-Quebec app.
Most Sensitive Data Compromised: The most sensitive data compromised in a breach was No.
.png)
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, two peer-facing consensus request handlers assume that the history index is always available and call blockchain.history_store.history_index().unwrap() directly. That assumption is false by construction. HistoryStoreProxy::history_index() explicitly returns None for the valid HistoryStoreProxy::WithoutIndex state. when a full node is syncing or otherwise running without the history index, a remote peer can send RequestTransactionsProof or RequestTransactionReceiptsByAddress and trigger an Option::unwrap() panic on the request path. This issue has been patched in version 1.3.0.
PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream() with follow_redirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadata services and internal network services. This issue has been patched in version 1.5.95.
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, OAuthManager.validate_token() returns True for any token not found in its internal store, which is empty by default. Any HTTP request to the MCP server with an arbitrary Bearer token is treated as authenticated, granting full access to all registered tools and agent capabilities. This issue has been patched in version 4.5.97.
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.
PraisonAI is a multi-agent teams system. Prior to version 4.5.90, MCPToolIndex.search_tools() compiles a caller-supplied string directly as a Python regular expression with no validation, sanitization, or timeout. A crafted regex causes catastrophic backtracking in the re engine, blocking the Python thread for hundreds of seconds and causing a complete service outage. This issue has been patched in version 4.5.90.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.