On May 28, 2025, in Gatineau, Quebec, Privacy Commissioner of Canada Philippe Dufresne addressed a significant data breach involving Nova Scotia Power, a subsidiary of Emera Inc. This breach, which was recently discovered by the company, has raised concerns regarding the safety of personal information for their customers.
"Following its recent discovery of a data breach, Nova Scotia Power notified my Office of the incident and submitted a breach report," said Dufresne. His office is taking the matter seriously, having already received complaints related to this breach. Thus, an investigation has been initiated under the _Personal Information Protection and Electronic Documents Act_ (PIPEDA).
"Following its recent discovery of a data breach, Nova Scotia Power notified my Office of the incident and submitted a breach report,"
Dufresne expressed his commitment to ensuring adequate measures are taken to safeguard personal information. "We are actively engaging with the organization to ensure that it is taking appropriate steps to respond to the incident," he stated. This involves enhancing breach containment procedures, notifying affected individuals, and reducing potential risks involved.
"We are actively engaging with the organization to ensure that it is taking appropriate steps to respond to the incident,"
Impact and Legacy
Impact and Legacy
Impact and Legacy
Nova Scotia Power has updated the Commissioner’s office on their ongoing response efforts. "Affected individuals are being notified, and the company is offering a two-year subscription for comprehensive credit monitoring services," Dufresne noted. This gesture aims to support those impacted by the breach and to alleviate some concerns regarding potential fraud.
"Affected individuals are being notified, and the company is offering a two-year subscription for comprehensive credit monitoring services,"
In light of the breach, Dufresne advised, "I encourage individuals who have been affected by the breach to consider signing up for the credit monitoring service to reduce the potential for fraud." He also suggested that victims take further precautions, including changing their account passwords, monitoring their personal accounts for any unusual activity, and notifying their financial institutions about the situation. For additional resources, he directed individuals to check priv.gc.ca for further information on protecting themselves.
The privacy commissioner revealed he is also in contact with his provincial counterpart in Nova Scotia to address the implications of the breach comprehensively.
Dufresne underscored that incidents like this serve as a stark reminder of the vulnerabilities present in today’s digital landscape. "Data breaches have surged over the past decade, and this incident highlights the growing risks of cyberattacks for all organizations," he stated. His remarks emphasized the necessity of prioritizing information security, especially as threats continue to evolve.
"Data breaches have surged over the past decade, and this incident highlights the growing risks of cyberattacks for all organizations,"
This incident at Nova Scotia Power is indicative of a larger trend within the energy sector and beyond, where organizations must remain vigilant against potential cyber threats. As the investigation continues, the emphasis on data security remains paramount, reflecting a need for organizations to enhance their protective measures amidst an ever-challenging digital environment.