- Nuva Scotia Power confirmed to suffer from a cyber attack in March 2025
- The attackers stole sensitive customer data, including names, SSN and – in some cases – banking information
- Customers are offered free identity flight monitoring
Nova Scotia Power, a large electricity supplier in the Canadian province, underwent a cyber attack in which he has lost information sensitive to customers. The company has confirmed the news in an announcement published on its website.
The original announcement, published at the end of April 2025, said that the attack had not disrupted the physical operations of the company, or its ability to serve its customers, but added that the team was working to bring back parts of its online computer system.
A subsequent update indicated that the attack had taken place on March 19, 2025 and that the disbelievers stole the names of the people, the telephone numbers, the email addresses, the postal addresses and the service, the energy consumption, the service requests, the payment of customers, the dates of the birth and the correspondence of the customer), the electric consumption, the license numbers of the drivers and the social insurance numbers.
No proof of abuse
“For some of our customers, bank account numbers (for pre-authorized payment) may also have been affected if this information has been provided by these customers.”
Although all stolen data are precious for criminals and can be used in a wide range of ways, from identity theft to phishing, this last part – the loss of bank account numbers – is particularly disturbing, because it also allows crooks to mount fraud by wire.
The Nuva Scotia Power stressed that there is no evidence that the data has been mistreated in the wild and added that it offered individuals for two years to a “full credit supervision service” at no cost.
The people affected by the breach are currently being informed, added the company, without exactly disclosing the number of people. At the time of the press, no threat actor claimed the responsibility of the attack.
Users are advised to remain vigilant and particularly cautious when they receive unlined emails or telephone calls, people claiming to be Nova Scotia.
Via Bleeping Compompute
