What happened

Nova Scotia Power said an employee visited a malware-compromised website and clicked a link that enabled a sophisticated foreign threat actor to enter its network. The actor stole internal data and personal information affecting approximately 375,000 current and 540,000 former customers, and destroyed or locked key business systems. Electricity generation and delivery continued, and meters still measured usage accurately, but malware severed the flow of readings into billing systems, producing estimated bills and prolonged customer-service disruption. Meter-to-billing connections were restored by 31 March 2026. The company has not publicly identified the actor's country, so Russia-linked claims are not assigned here.

When cited sources give different casualty, damage or spill figures for this event, they’re reported side by side above rather than merged into one number. See how confidence levels work.