Send this page to someone via email A Nova Scotia injury law firm is launching a class action lawsuit against Nova Scotia Power in light of this past spring’s cyberattack. In May, the private utility announced nearly 300,000 ratepayers had their private information stolen. The compromised data included names, birth dates, email addresses, home addresses, customer account information, driver’s licence numbers and, in some cases, bank account numbers and social insurance numbers. Since the breach, Nova Scotia Power says it’s been having difficulties with its remote meter readings and acknowledged it’s led to inaccurate bills being sent out. MacGillivray Law’s CEO says a statement of claim is being filed in Nova Scotia Supreme Court on Friday with the aim of holding the company to account. “We’ve been hearing concern about people’s social insurance numbers being compromised, concerns around that (but) more direct concerns and more passionate concerns about the billing issues,” said Jamie MacGillivray. Story continues below advertisement “We’re hearing about a lot of errors in billing. And usually it’s the ones we’re hearing about, they’re having to pay more, not less. And they’re checking the meters and it doesn’t jive.” He says people who have reached out to the law firm are already struggling with high costs and being overbilled by the utility is an added hardship. He says the company also owes it to the public to be transparent about what went wrong. Get breaking Nat

Nova Scotia’s private utility has been under intense scrutiny ever since data it collected from nearly 300,000 ratepayers was stolen by hackers in April. Nova Scotia Power says all information — banking information, driver’s license details and even social insurance numbers — has since been published on the dark web. “The evidence now suggests this was a Russian-based actor,” said Peter Gregg, the private utility’s president and CEO. Global’s Heidi Petracek reports.

Nova Scotia Power, the largest electric utility in Nova Scotia, suffered a cyberattack in which an unauthorized third party gained access to its IT systems and stole sensitive customer data. The breach, detected on April 25, 2025 (but originating around March 19, 2025), exposed a wide range of personal and financial information, including full names, Social Insurance Numbers (SIN), driver’s license numbers, bank account details, payment histories, and credit records. While the company confirmed no misuse of the stolen data yet, the incident has led to a surge in phishing and fraud attempts impersonating Nova Scotia Power. The utility is offering free credit monitoring to affected customers and working with cybersecurity experts to restore systems and prevent future breaches. Physical power operations remained unaffected, but the compromise of highly sensitive customer data poses significant risks of identity theft, financial fraud, and reputational damage.