Nova Scotia Power reports data breach, customer information exposed
Learn More
Nova Scotia Power, an electric utility in Canada, is reporting a cyberattack and a data breach involving the theft of customer information.
Their servers were compromised on or around March 19, 2025, when an unauthorized third party accessed and subsequently exfiltrated customer data. The data exposed in this breach includes:
- Social Insurance Numbers (SIN)
- Credit histories
- Driver's license information
- Bank account details
- Customer names
- Ages
- Phone numbers
- Email addresses
- Mailing addresses
- Service addresses
The nature of the attack and the number of affected individuals is not disclosed. Nova Scotia Power has begun notifying affected customers about the scope of the breach, advising them about the specific types of information that may have been exposed in this incident.
Update - as of 23rd of May 2025, Nova Scotia power reports that apparently hackers have published the stolen data online, and that the utility has sent notifications to roughly 280,000 individuals.
“We have learned that the threat actor has published data that was stolen from our systems,” the statement said. “We are actively working with cybersecurity experts to assess the nature and scope of the information that may have been impacted.”
As of 25th of June 2025, Nova Scotia Power reports that investigation has confirmed data belonging to former customers was also taken during the incident, in addition to the affected current customers. The utility says it does not know the full scope of the data yet. Nova Scotia Power will offer five years of free credit monitoring to all current and former customers.
As of 8th of July 2025, Nova Scotia Power reported that the ransomware attack disrupted the communication between customer power meters and billing systems, forcing the utility to send estimated bills to customers. While power meters continue to function and gather usage data, the incident has prevented this data from being transmitted to the company's systems for accurate billing.
