NSEB issues 17 undertakings to Nova Scotia Power in M12600 cybersecurity accountability proceeding, all due September 4, 2026

M12600 · Nova Scotia Power - Cybersecurity Accountability IN THE MATTER OF AN INQUIRY about the impact of the cyber incident on NOVA SCOTIA POWER INCORPORATED’s collection and retention of customer information, customer service and communications, billing processes and regulatory matters

AI summary

The Nova Scotia Energy Board issued 17 undertakings to Nova Scotia Power Incorporated on August 18–19, 2026, all with a uniform response deadline of September 4, 2026, in Matter M12600 (Nova Scotia Power - Cybersecurity Accountability).
Key undertakings probe the scope of the 2025 Cybersecurity incident, including the volume of the 13 terabytes of accessed data relative to NSPI's total IT network (U-2), and the volume of data in the July 2021 Azure staging area cut and the NAS device at the time of the attack (U-13, U-15).
Multiple undertakings target Social Insurance Number exposure and remediation: U-3 asks how many SINs may have been resident in the Data Lake at the time of the cyberattack and how many were expunged in 2024; U-10 and U-11 seek 2018 directions to staff regarding SIN deletion and documentation of the 2024 SIN elimination program respectively.
Financial accountability undertakings (U-7, U-8, U-9) require NSPI to disclose actual 2025 cybersecurity incident costs by category, forecasts for 2026–2027, a granular breakdown per CA IR-6 Attachment 1, and whether cybersecurity-related carrying costs on accounts receivable are tracked separately.
Customer communication undertakings (U-12, U-17) require NSPI to produce the staff script used to answer questions about the cyber incident and billing inserts sent to customers explaining the incident's impact on billing and estimated bills, with dates of distribution.

Disclaimer: This summary was generated by AI from the filings it describes. We take care to make it accurate, but errors are possible - and it isn't advice. Only the filings themselves are the record: if you're relying on something here, confirm it against the source documents or the Nova Scotia Energy Board's own record. Full disclaimer →

What was filed

Documents filed on this day

103319 Undertaking List other_documents