Nova Scotia Power officials say they don’t know why a digital copy of almost three decades worth of customer information that was later stolen in a cyberattack was not automatically deleted as intended.
The information, containing the personal data of hundreds of thousands of customers, was accessed in March 2025 by what the company has said it believes were Russia-based actors.
Get breaking National news
It contained addresses, phone numbers, banking information, social insurance numbers and other customer data.
Executive Blake Williams told a regulatory hearing that the company has mechanisms to automatically delete certain data in cycles of no more than 90 days.
- Public safety takes centre stage in closely watched Kelowna election race
- Province-city relationship key point during Winnipeg mayoral debate
- Miller says government moving quickly but no timeline for new digital regulator
- Canada Post CEO touts ‘early signs’ of recovery even as financial woes persist
-
![]()
Alberta remaining in Canada, but other 9 referendum questions send message to Ottawa: Ipsos -
![]()
Ottawa warns Stelco owner of legal action amid layoffs -
![]()
Defence minister responds to reports CAF was advised not to conduct fire training at CFB Wainwright -
![]()
Canadian government takes some of its websites offline amid worldwide security breach
He said the utility does not know why the file, created in 2021 and still present in the system in 2025, was never deleted.
If it had been destroyed as intended, Williams says the information would not have been available to the attackers.
Comments
Want to discuss? Please read our Commenting Policy first.