Emera and Nova Scotia Power Wrestle with Major Cyber Intrusion

Summary

• Incident Overview: Emera and its subsidiary Nova Scotia Power disclosed a cybersecurity incident in late April 2025.
• Response Initiatives: The companies brought in outside experts and isolated affected systems.
• Expert Insights: The attack hit business IT systems, not the power grid itself.
• Industry Impact: The case renewed attention on how utilities protect customer data and corporate networks.

What Was Disclosed

Emera and its subsidiary Nova Scotia Power announced in late April 2025 that they were responding to a cybersecurity incident. The companies said an unauthorized party had gained access to parts of their Canadian network and to servers supporting some business applications. Nova Scotia Power’s customer care and billing systems were affected, but the companies said there was no disruption to power generation, transmission or distribution. Emera’s utilities in the U.S. and the Caribbean were not affected.

Swift Response and Mitigation

After detecting the intrusion, the companies activated their incident response plans, isolated affected servers and hired outside cybersecurity experts. They also notified law enforcement and regulators.

The lights stayed on.

Expert Insights on Cyber Threats

Why utilities? They run essential services, and they hold a lot of customer data. Even when the grid itself is not touched, an attack on billing and customer systems can affect hundreds of thousands of people.

The usual advice applies: segment business networks from operational systems, keep systems patched, use multi-factor authentication and train staff to spot phishing.

Broader Implications on the Industry

It got worse. Nova Scotia Power later confirmed that customer data had been stolen and that it had been a ransomware attack, and that it did not pay the ransom. It notified about 280,000 affected customers and offered them credit monitoring.

The lesson is plain. The case shows why utilities need to protect corporate IT systems as carefully as the systems that control the grid.

Moving Forward: Strengthening Defense Strategies

Many utilities share threat information through groups such as the Electricity Information Sharing and Analysis Center (E-ISAC). Incidents like this one tend to bring more cooperation and more pressure from regulators.

The Takeaway

The intrusion at Emera and Nova Scotia Power showed that a cyberattack on a utility does not have to touch the grid to cause real harm. Customer data and business systems need strong protection too, and companies need to plan for the incident they hope never comes.

It was not quick. Billing problems lingered for months afterward.

For other utilities, the lessons are practical: separate critical systems, protect customer data and be ready to communicate clearly when something goes wrong.

John King, CISSP, PMP, CISM

John King currently works in the greater Los Angeles area as a ISSO (Information Systems Security Officer). John has a passion for learning and developing his cyber security skills through education, hands on work, and studying for IT certifications.