That figure comes from Symantec, which is an anti-virus company. The 2013 report for Canada reports that figure.
I'm not an expert on how to quantify these things. Some people might say they suspect that figure comes from a party that is interested in maybe growing the size of the problem, but that's probably better answered by some of my colleagues here who actually are specialized in those numbers.