Nova Scotia Power has confirmed that customer personal data was accessed and exfiltrated during a cybersecurity incident that occurred on April 25. The utility provider disclosed the breach in an update posted late Thursday, stating that the investigation into the full scope of the intrusion is ongoing.
“Rest assured, we are treating this situation very seriously. The security of your information is our top priority,” the company said in its statement.
Customer Notifications and Caution Urged
The company assured customers that individuals whose data was compromised will receive direct notification. These notices will include details of the specific information affected, along with available support resources.
“We are working urgently to determine the full nature and scope of the data that may have been affected, and individuals impacted,” the statement added.
Customers have been advised to remain alert for any suspicious or unsolicited communication that appears to come from Nova Scotia Power. This includes emails, phone calls, text messages, or social media posts requesting personal details. The utility has urged users not to click on unknown links or open attachments without verification.
Internal Systems Affected, Power Services Uninterrupted
Nova Scotia Power discovered the breach on April 25 and immediately activated its incident response plan. Internal servers and devices were taken offline, and third-party cybersecurity experts were brought in to assist with investigation and recovery efforts.
As of now, the company confirmed that the breach has had no impact on electricity generation or distribution infrastructure. Restoration of internal systems is still underway.
