Advertisement

Hacked N.S. power firm agrees to beef up security after customer data breached

Privacy Commissioner of Canada Philippe Dufresne speaks during a press conference at the National Press Theatre in Ottawa, on Tuesday, Sept. 23, 2025. THE CANADIAN PRESS/Spencer Colby. SC

Canada’s privacy commissioner says Nova Scotia’s largest power utility will strengthen its security following a cyberattack last year.

Nova Scotia Power sent a compliance letter to commissioner Philippe Dufresne saying it will delete customer social security numbers that it has on file.

The utility says in the letter it will also provide Dufresne’s office with the findings of an external security audit by the end of October.

In March 2025 a hacker accessed the data of hundreds of thousands of the utility’s customers.

Get daily Canada news delivered to your inbox so you'll never miss the day's top stories.

Get daily National news

Get daily Canada news delivered to your inbox so you'll never miss the day's top stories.
By providing your email address, you have read and agree to Global News' Terms and Conditions and Privacy Policy.

The company’s former CEO has said the cyberattack was likely conducted by a Russia-based actor.

The attack disrupted automated billing for nearly a year, with many customers complaining about inflated bills.

“We’ve learned a great deal from this incident and have taken steps to further enhance our cybersecurity and data governance practices to protect against this kind of criminal activity,” Nova Scotia Power CEO Vivek Sood said in a statement.

Story continues below advertisement

“We are committed to implementing all recommendations to protect our customers and our employees.”

Click to play video: 'Nova Scotia Power’s data breach under intense scrutiny — could class-action lawsuit be filed?'
Nova Scotia Power’s data breach under intense scrutiny — could class-action lawsuit be filed?

Sponsored content

AdChoices