Sensitive customer data, including bank and ID info, exposed in Nova Scotia Power cyberattack. Learn what’s at risk and how to stay protected.
Major Data Breach Hits Nova Scotia Power Customers
Are you a Nova Scotia Power customer? You may want to check your mailbox. The province’s electric utility has confirmed a significant cybersecurity breach, exposing sensitive personal and financial data of its customers. Here’s what’s happened-and what you should do next.
What Information Was Stolen?
Nova Scotia Power revealed that an unauthorized third party accessed and copied customer data from its IT systems around March 19, 2025. The information compromised varies by customer, but may include:
- Names, ages, and birthdates
- Phone numbers, email, and mailing addresses
- Service and billing addresses
- Account history and power consumption data
- Social Insurance Numbers (SIN)
- Driver’s license numbers
- Bank account details and credit histories
How Did the Breach Happen?
The breach was first detected in late April, but further investigation showed the unauthorized access likely occurred in mid-March. The company quickly paused billing operations and shut down its online portal to contain the threat. While some cybersecurity experts suspect ransomware, Nova Scotia Power has not confirmed this, stating that the investigation is ongoing.
What Is Nova Scotia Power Doing Now?
Customer Notifications: Affected customers are being notified by mail with details about what information was compromised and steps to take next. If you do not receive a letter, your data is not believed to be affected at this time.
Free Credit Monitoring: The utility is offering two years of free credit monitoring through TransUnion’s myTrueIdentity® service for those impacted.
Enhanced Security: Nova Scotia Power is working with external cybersecurity experts to restore systems and strengthen its defenses.
Billing and Fees: No disruption to electricity service has occurred, but billing has been paused and late fees are temporarily suspended.
What Should Customers Do?
Stay Alert: Be wary of unsolicited emails, texts, or phone calls claiming to be from Nova Scotia Power-especially those asking for personal information. Scammers often use stolen data to craft convincing phishing attempts.
Don’t Click Suspicious Links: Avoid clicking on links or downloading attachments from unexpected messages, even if they appear legitimate.
Activate Credit Monitoring: Follow the instructions in your notification letter to enroll in free credit monitoring and get support.
The Bigger Picture: A Growing Threat
This breach is part of a rising wave of cyberattacks targeting critical infrastructure worldwide. Experts warn that utilities like Nova Scotia Power are increasingly in the crosshairs, making robust cybersecurity more important than ever.
Nova Scotia Power assures customers that, so far, there is no evidence their information has been misused. However, vigilance is crucial in the weeks ahead as the investigation continues and the company works to rebuild trust and security.
