Overview

• A March 19 ransomware attack compromised personal data of past and present customers, potentially including names, contact details, account history, bank account numbers and Social Insurance Numbers.
• Nova Scotia Power has extended its credit monitoring offer to five years for all affected customers, up from an initial two-year program.
• Volunteer employees are providing in-person support across Nova Scotia to help customers register for monitoring and guard against identity theft.
• The utility has resumed issuing estimated bills and plans to delete all stored Social Insurance Numbers once the investigation permits.
• Federal privacy commissioner Philippe Dufresne opened a formal investigation into the breach response on May 28, and company executives testified before the Public Accounts Committee on June 3.