Regulator Launches Two-Part Probe into N.S. Utility Cyberattack

Regulator Launches Two-Part Probe into N.S. Utility Cyberattack

Nova Scotia’s energy regulator is set to initiate a two-part inquiry into a significant cyberattack that impacted the province’s private power utility, Nova Scotia Power. The attack occurred in March 2025, affecting the personal information of approximately 280,000 customers.

Background of the Cyberattack

Initial assessments suggest that a Russia-based actor may have been responsible for the breach. In response to this incident, the Nova Scotia Energy Board will conduct a thorough examination of the technical aspects of the attack.

Inquiry Focus Areas

  • Technical Investigation: This part will analyze the security measures and protocols in place before the incident, along with the utility’s recovery actions following the attack.
  • Data and Billing Practices: A separate inquiry will investigate how Nova Scotia Power collected and safeguarded customer information. This includes reviewing the methods used for billing estimation after a disruption in communication with power meters.

Concerns Raised by Officials

Recently, customers have expressed dissatisfaction due to rising power bills. Premier Tim Houston criticized the utility for inflated charges, which have reportedly increased for many residents post-attack. Houston, also serving as the provincial energy minister, pressed for accountability and a formal investigation into billing practices.

Accountability and Transparency

Stephen Moore, the premier’s communications director, emphasized the need for Nova Scotia Power to clarify its billing estimate calculations. He stated that the power company has caused confusion and eroded public confidence in the power system. Moore highlighted the need for a comprehensive investigation with the same level of scrutiny as the cybersecurity incident.

Utility’s Response and Cooperation

Nova Scotia Power acknowledged the inquiries, expressing a commitment to transparency. A spokesperson, Jacqueline Foster, stated that the utility has been providing regular updates to the energy board since the cyber incident.

Upcoming Hearings

The main inquiry regarding cybersecurity will not have scheduled hearings yet, while the second inquiry concerning billing practices is expected to include witness testimonies in July.

Legal Challenges and Rate Increases

In addition to the inquiries, Nova Scotia Power faces potential legal repercussions. A class-action lawsuit has been filed by MacGillivray Injury and Insurance Law, alleging governance failures and inaccuracies affecting numerous customers. Furthermore, the utility has proposed rate increases of approximately eight percent, which could take effect as early as January 2027.

As this situation develops, it remains crucial for Nova Scotia Power to demonstrate its commitment to resolving these issues and restoring trust among its customers.