The Canadian financial system is vulnerable to cyber threats. But for many firms, cyber risk is difficult to quantify. We examine public information on past cyber incidents to better understand the current risk landscape and find that a holistic view is needed to fully grasp the nature of this risk.