Cyber Storm: Nova Scotia Power’s Data Breach Sparks Security Alarm

Summary

• Incident: Nova Scotia Power was hit by a ransomware attack, and the province’s largest utility had to warn customers.
• Response: The company isolated affected servers and brought in outside security experts.
• Impact: Some customer and billing systems went offline. Power delivery kept running.
• Trend: Ransomware gangs keep going after utilities and other critical infrastructure.

The Attack: A Hard Moment for Nova Scotia Power

Nova Scotia Power, the main electric utility in the Canadian province and part of Emera, found intruders in its network in late April 2025. It later confirmed the attack was ransomware. Electricity kept flowing, but the case raised fresh questions about how well utilities protect their business networks.

It fits a pattern. Criminal groups keep targeting utilities because outages and data theft put heavy pressure on them to pay. The company said it did not pay the ransom.

First Steps: Containing the Attack

The company said it detected the intrusion on April 25 and moved to contain it, taking some systems offline and working with outside cybersecurity experts. That meant disruption for customers, including problems with online accounts and billing. Shutting systems down hurts. Leaving infected ones running is worse.

By mid-May the company had confirmed that the attackers stole customer data, including names and contact details and, for some customers, banking and social insurance numbers. It started notifying affected people and offered credit monitoring.

What It Means for Other Utilities

Nova Scotia Power is one more utility on a long list. Its power grid controls were not affected, according to the company, but the attack shows how much damage a hit on the business network can do on its own.

Utilities can take a few practical steps. Keep IT and operational networks separate. Require multi-factor authentication for remote access. Rehearse recovery from backups before an attack, not during one. Sharing attack details with peers and government agencies also helps others spot the same group sooner.

What Customers Should Do

Customers who get a notice should take up the credit monitoring offer, watch bank statements and be wary of calls or emails that claim to come from the utility and ask for payment details. Scammers often follow big breaches.

The company has promised updates as its investigation continues.

The Bottom Line for Nova Scotia

The attack on Nova Scotia Power is another warning about the weak spots in critical infrastructure. The lights stayed on. The data did not stay safe.

Better defenses matter for public trust as well as for risk. Customers want to know their utility can keep both the power and their personal details secure.

Expect regulators to ask hard questions.

John King, CISSP, PMP, CISM

John King currently works in the greater Los Angeles area as a ISSO (Information Systems Security Officer). John has a passion for learning and developing his cyber security skills through education, hands on work, and studying for IT certifications.