Regulator plans two-part inquiry into last year’s cyberattack at N.S. utility
Nova Scotia’s energy regulator is initiating a two-part inquiry into a cyberattack on Nova Scotia Power that compromised customer data and led to billing issues.
Nova Scotia's energy regulator is set to conduct a two-part inquiry regarding a cyberattack that hit Nova Scotia Power last year. This incident, which occurred in March 2025, involved a breach by a Russia-based actor, leading to unauthorized access to the personal information of approximately 280,000 customers. The inquiry will include a technical examination of the cyberattack to understand its nature and impact, and how the utility responded to the breach.
In addition to the technical review, a separate investigation will focus on Nova Scotia Power's practices regarding the collection, storage, and processing of customer data. This inquiry is particularly relevant given the complaints from politicians and consumers regarding substantial spikes in power bills following the cyberattack. The premier of Nova Scotia, Tim Houston, has voiced concerns about the utility's handling of billing processes after the communication with power meters was disrupted. Reports indicate that customers faced inflated charges and inconsistencies in their billing.
Nova Scotia Power has reported progress in restoring its systems, with 75 percent of its meters successfully transmitting accurate data again by the end of January, and plans to have all meters back online by the end of March. The outcomes of the regulatory inquiry could lead to significant implications for regulatory practices, customer data protection, and operational accountability within the utility sector in Nova Scotia.