Late last month, Nova Scotia Power, the principal electric utility serving the Canadian province, confirmed that a recent cyberattack resulted in the unauthorized access and compromise of personal information belonging to some of its customers. The utility’s investigation revealed that threat actors infiltrated its systems and gained entry to databases containing customer names, addresses, contact details, account numbers and billing histories. While no operational disruption to electrical generation or distribution was reported, the breach exposed sensitive data that could be used for identity fraud, phishing campaigns or other illicit purposes. Nova Scotia Power notified affected individuals by mail and email, advising them to remain vigilant against suspicious communications and offering credit monitoring services to mitigate potential misuse of their information. The company has engaged external cybersecurity experts and law enforcement to determine the full scope of the incident, identify the intrusion vector and shore up defenses against future attacks. Nova Scotia Power emphasized that it is committed to transparency and is taking steps to enhance its network security, strengthen monitoring capabilities and reinforce employee training to prevent a recurrence of such a data compromise.