Nova Scotia Power to Strengthen Security Following Data Breach
Nova Scotia’s largest power utility, Nova Scotia Power, has committed to enhancing its cybersecurity measures after a major data breach exposed the personal information of hundreds of thousands of customers. The breach, which occurred in March 2025, was attributed to a cyberattack by a likely Russia-based hacker. Following the breach, the company has pledged to delete sensitive data, including social security numbers, from its records. Additionally, an external security audit will be provided to the privacy commissioner by the end of October. The breach disrupted the utility’s automated billing system for nearly a year, with many customers reporting inflated bills. Nova Scotia Power’s CEO, Vivek Sood, stated that the company has learned from this incident and will implement all recommendations to improve its cybersecurity and data governance to protect both customers and employees. This development comes amid growing scrutiny of the company’s response and the possibility of a class-action lawsuit from affected customers.
