Statement by the Privacy Commissioner of Canada regarding the data breach at Nova Scotia Power

May 28, 2025
Gatineau, Quebec

Privacy Commissioner of Canada Philippe Dufresne today issued the following statement to provide an update regarding a privacy breach at Nova Scotia Power, a subsidiary of Emera Inc.

---

Following its recent discovery of a data breach, Nova Scotia Power notified my Office of the incident and submitted a breach report.

My Office has since received complaints regarding the breach and I therefore launched an investigation under the Personal Information Protection and Electronic Documents Act (PIPEDA).

We are actively engaging with the organization to ensure that it is taking appropriate steps to respond to the incident, and my immediate focus is on ensuring that the company is effectively addressing the breach and protecting the personal information of its customers. This includes breach containment, notification and measures to reduce risks to those affected.

Nova Scotia Power has advised my Office that affected individuals are being notified, and that the company is offering a two-year subscription for comprehensive credit monitoring services.

I encourage individuals who have been affected by the breach to consider signing up for the credit monitoring service to reduce the potential for fraud. They should also take other steps to protect their data such as changing their account passwords, monitoring other accounts, and notifying their financial institution. I also encourage individuals to visit priv.gc.ca for more information about the steps to take to protect themselves.

I am in contact with my provincial counterpart in Nova Scotia on this matter.

Data breaches have surged over the past decade and this incident highlights the growing risks of cyberattacks for all organizations. Prioritizing information security is essential to respond to a threat environment that is continuously evolving.

Related links

• Receiving a privacy breach notification (Advice for individuals impacted by breaches)
• Preventing and responding to a privacy breach
• What you need to know about mandatory reporting of breaches of security safeguards

Media contact

Office of the Privacy Commissioner of Canada
communications@priv.gc.ca