Skip Navigation

Case Study | Town of St Marys

From Recovery to Resilience: The Town of St. Marys’ Cybersecurity Journey

See Field Effect MDR in action

Industry

Municipality

Business Need

A trusted partner to accelerate its cybersecurity maturity and reduce the risk of future attacks

Solution

Field Effect MDR

Company Logo

The Results

  • Gained 24/7 monitoring and response, effectively expanding the IT team’s capacity without additional headcount
  • Accelerated cybersecurity maturity with clear guidance, expert support, and a defined roadmap for resilience
  • Strengthened organizational alignment by making cybersecurity progress visible, transparent, and prioritized 

When I get an ARO from Field Effect, I know it’s not noise—something needs attention. There’s no guesswork.

The company

Located in southwestern Ontario, the Town of St. Marys is a municipality of just over 7,000 residents, known for its strong sense of community and progressive community services.

Governed by a small but resourceful team, the town’s Department of Corporate Services oversees a diverse portfolio—including finance, communications, tourism, and information technology. As part of its commitment to modernization and public trust, the Town had been steadily upgrading its digital infrastructure and enhancing its cybersecurity practices.

That journey took a pivotal turn when a ransomware incident struck—becoming the catalyst that accelerated transformation and led to a strategic partnership with Field Effect to strengthen its security posture.

The challenge

With cyberattacks on municipalities becoming increasingly common, the Town of St. Marys had already begun modernizing its IT and cybersecurity operations. This included restructuring its team, migrating systems to the cloud, and implementing security best practices.

But as a small municipality, they advanced at a measured pace, carefully balancing progress with available resources.

"We were taking the right steps but doing so gradually—being mindful of both our budget and the capacity of our small team. At the time, we genuinely didn’t think we were a likely target, so there wasn’t the urgency to accelerate the process," said André Morin, Director of Corporate Services, Town of St Marys.

That perception dramatically changed when a ransomware attack was detected during a routine system backup. Thanks to a fast response and early progress on cloud migration, the town was able to avoid disruption to their services; however, sensitive data had been exfiltrate and a ransomware issued.

The recovery process required weeks of coordination with legal counsel, government agencies, and third-party consultants. It took four months and cost $1.3 million to fully restore operations, highlighting the need to make cybersecurity a top organizational priority.

With limited resources, they were looking for more than just 24/7 monitoring and expert support—they were looking for a Canadian solution that provided data autonomy and delivered strong value within a constrained municipal budget.

“As a small municipality, we still had to balance cybersecurity with other priorities. Focusing all our budget and resources on monitoring wasn’t sustainable—we needed a solution that delivered real value and still let us focus on improving in other areas of our IT,” said Morin.

The solution

The Town of St. Marys needed a trusted partner to help accelerate its cybersecurity maturity and reduce the risk of future attacks. Familiar with Field Effect’s strong reputation, the Town of St. Marys saw Field Effect MDR Complete as the clear choice.

The solution delivered enterprise-grade protection that uniquely combined best-in-class technology and expert-support—offering unmatched value compared to other providers. With the flexibility to store sensitive security data on-premises, the town gained everything it needed to reduce risk without overextending its limited resources.

Field Effect’s proprietary AROs (Actions, Recommendations, and Observations) provided the town’s small IT team with clear, actionable guidance—eliminating noise and enabling them to respond confidently with the resources they already had.

“When I get an ARO from Field Effect, I know it’s not noise. It means something needs attention, or something’s already gone sideways. There’s no guesswork,” said Brad Hynes, IT Manager, Town of St Marys.

In addition, Field Effect brought decades of cybersecurity expertise and professional services to help the Town of St. Marys mature its broader strategy. This support enabled the town to define a clear, long-term roadmap for resilience through stronger policies, processes, and governance, all aligned to industry best practices.

The results

Since partnering with Field Effect, the Town of St. Marys has accelerated their cybersecurity resilience—allowing the team to focus on continuous advancement of their broader strategy without overextending their limited resources.

“We’re in a much better position today than we were when the attack happened—and we’ll be in an even better spot next year. It’s a continuous improvement,” said Hynes.

Field Effect has extensively expanded the capacity of the town’s IT department. “Being a team of two, it’s impossible to have eyes on glass 24/7. But now we do,” said Hynes. “With Field Effect MDR, it feels like I’m running a much larger IT team than I actually have. And when we need support, Field Effect responds.”

At the same time, Field Effect’s professional reporting has helped communicate progress clearly to leadership—building transparency and elevating cybersecurity to a shared responsibility. “The reports are professional and easy to understand,” said Morin. “They help leadership stay informed and maintain the importance of cybersecurity across the organization.”

With Field Effect as a trusted partner, the Town of St. Marys is confident not just in its ability to reduce risk—but to respond quickly and recover effectively if a future incident occurs. Most importantly, they’ve gained the tools, support, and peace of mind to stay focused on what matters most: serving their community with confidence.

“In retrospect, the attack feels like a blessing,” said Morin. “We were able to contain it early, and it pushed us to accelerate our transformation—to secure the municipality and better prepare for future threats.”

The Results

  • Gained 24/7 monitoring and response, effectively expanding the IT team’s capacity without additional headcount
  • Accelerated cybersecurity maturity with clear guidance, expert support, and a defined roadmap for resilience
  • Strengthened organizational alignment by making cybersecurity progress visible, transparent, and prioritized 

Being a team of two, it’s impossible to have eyes on glass 24/7. But now we do. With Field Effect MDR, it feels like I’m running a much larger IT team than I actually have.

Brad Hynes
IT Manager – Town of St Marys

Demo video

See what makes Field Effect MDR different.

Curious what Field Effect MDR actually looks like?

This no-fluff demo video tours the intuitive dashboard, showcasing key features and functionalities including our proprietary approach to alerting known as AROs.

Fill out the form to watch the demo now.