“The greatest threat to cybersecurity is not artificial intelligence becoming too intelligent. It is human beings failing to exercise the intelligence they already possess. The most sophisticated security system in the world cannot protect an organization from the consequences of ignorance, complacency, and a complete absence of common sense.” – MJ Martin
A Disturbing Discovery at Tim Hortons
On Sunday, October 11, 2026, I stopped at a Tim Hortons restaurant for a simple lunch of soup and a sandwich. While waiting for my order, something caught my attention. It was not the food, the service, or the familiar surroundings. It was a sign posted on the wall, visible to everyone.
As someone who has spent decades working with information technology and communications systems, I immediately questioned the security implications.
Why would potentially sensitive operational information be displayed publicly? Who authorized it? Had anyone considered how cybercriminals might exploit such information?
YIKES!
A sign alone cannot establish whether a network is vulnerable. Nevertheless, publicly exposing sensitive information (User ID, a ridiculously weak password, and a PIN) can reveal a troubling lack of cybersecurity awareness.
Canada’s Growing Cybersecurity Crisis
According to the Canadian Centre for Cyber Security, ransomware remains among Canada’s most serious cyber threats. Its 2025–2027 assessment warns that financially motivated attackers target organizations of every size and across virtually every industry.
Statistics Canada reported that Canadian businesses spent approximately $1.2 billion recovering from cybersecurity incidents in 2023, double the amount recorded in 2021.
These are not theoretical threats. They represent lost productivity, compromised information, operational disruption, and substantial financial damage.
Leaving the Front Door Unlocked
Imagine purchasing an expensive security system for your home, installing sophisticated locks, and then leaving your house keys hanging outside the front door.
That is effectively what organizations risk doing when they expose passwords, network configurations, administrative credentials, or other sensitive technical information.
Cybersecurity is only as strong as its weakest control.
A restaurant depends upon payment terminals, point-of-sale systems, inventory management, employee records, and corporate communications. Compromising these systems could disrupt operations and expose sensitive information.
Security must extend beyond firewalls and antivirus software. It requires employee education, access controls, multifactor authentication, regular updates, and tested backups.
Cyber Insurance Is Not a Substitute for Security
Some organizations mistakenly believe that cyber insurance will rescue them following an attack.
Not necessarily!
Insurance coverage depends upon policy wording, exclusions, representations made during underwriting, and compliance with applicable conditions.
An organization that misrepresents its cybersecurity controls or fails to maintain required safeguards could face serious coverage disputes.
Insurance is a financial safety net, not permission to disregard fundamental security practices.
Artificial Intelligence Versus Human Intelligence
People frequently ask me whether artificial intelligence represents an existential cybersecurity threat.
Certainly, AI can strengthen cybercriminal capabilities. However, I remain concerned about something considerably more fundamental.
Human judgment.
Technology cannot compensate for employees who disregard elementary security principles or executives who fail to establish a culture of accountability.
The solution begins with leadership, education, vigilance, and common sense.
Before condemning an organization, we should also ask whether a visible weakness reflects one employee’s mistake or a broader management failure.
And if we observe a vulnerability, should we not report it responsibly before exposing it publicly?
Ultimately, cybersecurity is everyone’s responsibility. So, I will ask for the manager and point out this colossal mistake.
We continually ask whether artificial intelligence will become sufficiently intelligent to threaten humanity.
Perhaps we should first ask whether humanity is exercising sufficient intelligence to protect itself.
#timhortons #timhortonscanada #cybersecurity #ransomware #informationsecurity #artificialintelligence
Canadian evidence:
– Canadian Centre for Cyber Security,
– Ransomware Threat Outlook 2025–2027; Statistics Canada,
– Impact of Cybercrime on Canadian Businesses, 2023;
– Canadian Centre for Cyber Security, Ransomware Prevention and Recovery Guidance.
About the Author:
Michael Martin is the Vice President of Technology with Metercor Inc., a Smart Meter, IoT, and Smart City systems integrator based in Canada. He has more than 40 years of experience in systems design for applications that use broadband networks, optical fibre, wireless, and digital communications technologies. He is a business and technology consultant. He was a senior executive consultant for 15 years with IBM, where he worked in the GBS Global Center of Competency for Energy and Utilities and the GTS Global Center of Excellence for Energy and Utilities. He is a founding partner and President of MICAN Communications and before that was President of Comlink Systems Limited and Ensat Broadcast Services, Inc., both divisions of Cygnal Technologies Corporation (CYN: TSX).
Martin served on the Board of Directors for TeraGo Inc (TGO: TSX) and on the Board of Directors for Avante Logixx Inc. (XX: TSX.V). He has served as a Member, SCC ISO-IEC JTC 1/SC-41 – Internet of Things and related technologies, ISO – International Organization for Standardization, and as a member of the NIST SP 500-325 Fog Computing Conceptual Model, National Institute of Standards and Technology. He served on the Board of Governors of the University of Ontario Institute of Technology (UOIT) [now Ontario Tech University] and on the Board of Advisers of five different Colleges in Ontario – Centennial College, Humber College, George Brown College, Durham College, Ryerson Polytechnic University [now Toronto Metropolitan University]. For 16 years he served on the Board of the Society of Motion Picture and Television Engineers (SMPTE), Toronto Section.
He holds three master’s degrees – in business (MBA), communication (MA), and education (MEd). As well, he has three undergraduate diplomas and seven major certifications in business, computer programming, internetworking, project management, media, photography, and communication technology. He has completed over 80 next generation MOOC (Massive Open Online Courses) [aka Micro Learning] continuous education programs in a wide variety of topics, including: Economics, Python Programming, Internet of Things, Cloud, Artificial Intelligence and Cognitive systems, Blockchain, Agile, Power BI, Big Data, Design Thinking, Security, Indigenous Canada awareness, and more.
Martin is a volunteer, a photographer, a learner, a technologist, a pilot, a philosophizer, and always, a romantic optimist.