Gaps in Ottawa's cyber defences could leave the government agencies holding vast amounts of data on Canadians and businesses susceptible to state-sponsored hackers from countries like China and Russia, says a new report from Parliament's security and intelligence committee.