Nova Scotia Power Data Breach Compromises Data of Over 900,000 Users

A SocGholish malware infection at Nova Scotia Power led to weeks of undetected lateral movement and credential harvesting by attackers, resulting in exfiltration of sensitive personal and financial data for ~375,000 current and ~540,000 former customers (including names, contact details, DOBs, driver’s license numbers, SINs and banking/billing records) and the deployment of ransomware that destroyed backups; the company declined to pay the ransom and is under oversight by the Office of the Privacy Commissioner while committing to enhanced security measures.