NS Power Discloses Massive Cyberbreach Affecting 900,000 Customers
Nova Scotia Power has announced that a significant cybersecurity incident in 2025 impacted approximately 900,000 current and former customers. The breach, which targeted the utility company's systems, compromised sensitive personal and financial data, raising serious concerns about data protection in critical infrastructure sectors.
Details of the 2025 Cyberattack
The cyberbreach, which occurred in 2025, involved unauthorized access to NS Power's databases containing customer information. According to the company, the affected data includes names, addresses, account numbers, and in some cases, payment details. The incident was discovered during a routine security audit, prompting an immediate investigation and notification to regulatory authorities.
NS Power has stated that it is working closely with cybersecurity experts and law enforcement to assess the full scope of the breach. The company has also implemented enhanced security measures to prevent future incidents, including multi-factor authentication and advanced threat detection systems.
Impact on Customers and Response Efforts
The breach affects a vast number of individuals, highlighting the scale of the attack. NS Power is offering free credit monitoring and identity theft protection services to all impacted customers for a period of two years. Additionally, the company has set up a dedicated support line and online portal to assist those affected.
"We deeply regret this incident and are committed to supporting our customers through this challenging time," said a spokesperson for NS Power. "Our priority is to ensure the security of our systems and the trust of our community."
Broader Implications for the Energy Sector
This cyberbreach underscores the growing threat of cyberattacks on energy providers, which are increasingly targeted due to their critical role in society. Similar incidents have been reported globally, including a major assault on Poland's energy sector in 2025, as noted in recent cybersecurity reports.
Experts warn that such attacks can disrupt services, compromise national security, and lead to significant financial losses. They recommend that utility companies invest in robust cybersecurity frameworks, regular audits, and employee training to mitigate risks.
- Implementing real-time monitoring for suspicious activities.
- Conducting frequent vulnerability assessments.
- Collaborating with government agencies on threat intelligence.
As cyber threats evolve, the need for proactive measures in protecting critical infrastructure becomes ever more urgent. This incident serves as a stark reminder of the vulnerabilities in our digital age and the importance of safeguarding sensitive data against malicious actors.



