Sorry, you need to enable JavaScript to visit this website.

Town of Mount Royal warns residents after CodeRED emergency alert data theft


MOUNT ROYAL, QUE.

The Town of Mount Royal, an on-island Montreal suburb, told residents on Nov. 27, 2025 that personal data from its emergency alert service was stolen in a breach at the platform's vendor, OnSolve's CodeRED.

According to the town's notice, an unauthorized party removed CodeRED data from OnSolve's systems in November. The data included subscribers' names, addresses, phone numbers, email addresses and the passwords they created for their CodeRED profiles. OnSolve warned the data may be made public. The town said its own systems were not affected and that other North American cities using the platform were also hit. Several Quebec municipalities issued similar warnings, according to KonBriefing.

The old CodeRED platform was deactivated, and the town said it may not be able to recover its full subscriber list for the replacement system.

The main risk is password reuse. Anyone who registered for CodeRED alerts should change that password on every other service where they used it, watch for messages that appear to be emergency alerts asking for personal details, and re-register when their municipality announces the new system.

Editor's Picks

The best of cybersecuritynews.ca, delivered to you weekly.

On Display
Linux

Critical Linux Kernel TCP Vulnerability Exposes Servers to Remote Code Execution

OpenBSD

OpenBSD Issues Urgent Advisory Targeting OpenSSH Vulnerabilities

PHP

PHP2Shell: Active Exploitation Reports