Nova Scotia Power experienced a data breach following a cyberattack earlier this year, affecting about 280,000 people. Hackers accessed critical systems from March 19 to April 25, stealing names, addresses, driver's license numbers, Canadian Social Insurance numbers, bank account details, and other sensitive information. The company is providing two years of credit monitoring services to victims. Law enforcement and regulatory agencies have been notified. The breach impacted customer care phone lines and the online customer portal, but there was no disruption to physical operations. The company declined to confirm if it was a ransomware attack.
Source: https://therecord.media/thousands-impacted-cyber-nova-scotia
TPRM report: https://scoringcyber.rankiteo.com/company/nova-scotia-power
"id": "nov341070825",
"linkid": "nova-scotia-power",
"type": "Cyber Attack",
"date": "7/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 280000,
'industry': 'Energy',
'location': 'Nova Scotia, Canada',
'name': 'Nova Scotia Power',
'size': 'Serves more than half a million homes and '
'facilities across the province',
'type': 'Utility Company'}],
'customer_advisories': 'Letters to victims, FAQ page on the website',
'data_breach': {'data_exfiltration': True,
'number_of_records_exposed': 280000,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['names',
'addresses',
"driver's license numbers",
'Canadian Social Insurance '
'numbers',
'bank account details',
'power consumption',
'service requests',
'customer payment',
'billing and credit history',
'customer correspondence']},
'date_detected': '2024-03-19',
'description': 'Nova Scotia Power experienced a data breach following a '
'cyberattack earlier this year, affecting about 280,000 '
'people. Hackers had access to critical systems from March 19 '
'to April 25, stealing various types of personal and financial '
'information.',
'impact': {'data_compromised': ['names',
'addresses',
"driver's license numbers",
'Canadian Social Insurance numbers',
'bank account details',
'power consumption',
'service requests',
'customer payment',
'billing and credit history',
'customer correspondence'],
'systems_affected': ['customer care phone line',
'online customer portal known as MyAccount']},
'investigation_status': 'Ongoing',
'references': [{'source': 'Nova Scotia Power Press Release'}],
'regulatory_compliance': {'regulatory_notifications': True},
'response': {'communication_strategy': 'Letters to victims, FAQ page on the '
'website',
'containment_measures': 'Isolated certain servers affected by '
'the attack',
'law_enforcement_notified': True,
'remediation_measures': 'Rebuilding impacted systems, providing '
'two years of credit monitoring '
'services'},
'title': 'Nova Scotia Power Data Breach',
'type': 'Data Breach'}