The Toronto Public Library (TPL) operates the largest public library system in Canada through TPL’s network of 100 branches across Toronto. In 2024, there were 13.4 million in-branch visits and 31.5 million online visits, with approximately 1.1 million registered library cardholders.1 The TPL’s 2025 operating budget was $269 million, funded mostly by the City of Toronto along with fees and other revenue sources.2
Technology plays an important role in all aspects of the TPL’s operations. This report includes the results of our vulnerability assessment and penetration testing of the TPL’s network, systems, applications and devices. We also reviewed user access management, cybersecurity incident logging and monitoring, and tested physical security in relation to cybersecurity.
This report includes three administrative recommendations. The confidential findings and recommendations are contained in Confidential Attachment 1 to this report. A separate confidential technical report has been provided to management with technical details to guide them in addressing the report findings and recommendations.
Management agrees with the recommendations in Confidential Attachment 1, which also includes management’s response.
1 TPL 2024 Public Service Statistics, Trends & Comparisons, pages 2, 23 & 32
2 Toronto Public Library – 2025 Budget Presentation, page 10