Topic:"Cybersecurity" in M12451

\ \ EXTERNAL EMAIL / COURRIEL EXTERNE \ \ Exercise caution when opening attachments or clicking on links / Faites preuve de prudence si vous ouvrez une pièce jointe ou cliquez sur un lien Sir , I have heard the ns power board is looking to...

AI summary A Nova Scotian resident criticizes Nova Scotia Power (NSP) for requesting a 2.5% rate increase amid personal financial hardship, including data breaches and poverty. They argue that consumers should not bear the cost of NSP's corporate failures, demanding accountability and rejecting further financial burden.

Good afternoon I am writing to oppose this rate increase in its entirety. As one of those affected by the recent cyber security breach at NSP, I feel that we the customers are being asked to cover the cost of NSP's complete and utter lack...

AI summary Nancy Selig opposes a rate increase by NSP, citing a cybersecurity breach and lack of due diligence. She argues customers should not bear costs of NSP's failures, highlighting the company's monopoly and inadequate security measures. Selig emphasizes that customers have no alternative power suppliers and criticizes NSP's prioritization of executive bonuses over reliable service.

\ \ EXTERNAL EMAIL / COURRIEL EXTERNE \ \ Exercise caution when opening attachments or clicking on links / Faites preuve de prudence si vous ouvrez une pièce jointe ou cliquez sur un lien Nova Scotia Power should be ashamed of themselves....

AI summary The email criticizes Nova Scotia Power (NSP) for proposing rate increases following a cyberattack, alleging that NSP prioritizes profits over customer welfare. The email also references a submission query, though details are incomplete.

3) Major cybersecurity failure In April 2025, Nova Scotia Power suffered a ransomware attack that stole customer data. Completely unacceptable and shows the lack of care this company has for the people of Nova Scotia.

AI summary In April 2025, Nova Scotia Power (NSP) experienced a ransomware attack that compromised customer data. The incident is criticized as unacceptable, reflecting a lack of care by NSP towards Nova Scotia residents.

5) The case for public control Electricity is a public necessity. Given the high rates, fossil-fuel reliance, cybersecurity lapses, and reliability shortfalls, I believe the Province should bring Nova Scotia's electric utility under public...

AI summary The text argues that Nova Scotia's electric utility should be under public ownership due to high rates, fossil-fuel reliance, cybersecurity issues, and reliability problems. The author emphasizes public interest over shareholder returns. The email chain includes multiple participants but lacks direct references to regulatory matters.

Support for 2026-2027 GRA - Further to the letter filed with the Nova Scotia Energy Board (NSEB or Board) on September 2, - 2025, Nova Scotia Power Incorporated (NS Power or Company) is filing this General Rate - Application for 2026-2027...

AI summary Nova Scotia Power Incorporated (NS Power) submits a 2026-2027 General Rate Application (GRA) supported by customer representatives after a collaborative process. The GRA is based on a Cost-of-Service Study (COSS) and excludes cybersecurity attack costs. It reflects negotiated outcomes with reduced costs due to regulatory efficiencies.

1.4 Enterprise Asset Management and Project Implementation The EAM and Project Implementation teams are responsible for asset management strategies, capital management and execution of large capital projects. These teams are responsible fo...

AI summary The EAM and Project Implementation teams manage asset strategies and capital projects for NS Power, focusing on decarbonization and reliability. OM&G expenses rose to $8.5M in 2024 due to expanded EIT programs and increased headcount. Forecasts show continued growth through 2027, driven by inflation, personnel needs, and cybersecurity investments. EITs are prioritized for cost-effective project management.

1.8.1 IT Costs NS Power's information technology OM&G expense forecast has increased from $40.5 million in the restated 2024 GRA compliance forecast to $46.0 million in actual 2024 expense. In addition to inflationary cost pressures, incre...

AI summary NS Power's IT OM&G expenses increased from $40.5M to $46M in 2024 due to inflation, cybersecurity requirements, higher contract prices, cloud migration, and the addition of the Strategic Planning team.

1.8.2 Cyber Security Requirements The confidentiality, accessibility and integrity of customer, employee and vendor information is a critical priority for NS Power. To address this requirement, NS Power follows a cyber security framework d...

AI summary NS Power prioritizes protecting customer, employee, and vendor information through a cyber security framework aligned with NERC standards for critical infrastructure. The framework includes capabilities for identifying, detecting, protecting, responding to, and recovering from security breaches.

1.8.4 Movement of IT Services to the Cloud As can be seen in in IT3 metric in NS Power's benchmarking study submitted as OP-03 Attachment 1, the percentage of costs allocated to capital expenditures as opposed to operating expense is on a...

AI summary NS Power's IT expenditure trend shows a shift from capital to operating expenses due to cloud migration, with 48% capital costs in 2019 dropping to 32% in 2023. Cloud adoption increases OM&G costs via subscription models but reduces capital needs. Examples include email migration to Microsoft Exchange, offering benefits like faster feature implementation and improved cyber resilience.

1.8.5 Strategic Planning The Strategic Planning Team works with leaders across the business to identify, plan and recommend technology-intensive investments that drive enterprise level value. This includes establishing and managing a portf...

AI summary The Strategic Planning Team manages technology investments aligned with business objectives, with IT costs increasing from $47.6M in 2025 to $52.5M in 2027 due to staffing, cybersecurity, and cloud migration, partially offset by $3.5M in recoveries from affiliated companies.

(in Thousands of $) 2024 Compliance 2026 Forecast vs 2024 2026 Forecast vs 2024 2026 Forecast vs 2025 2027 Forecast vs 2026 Information Technology Overview 50 642 2026 Forecast vs. 52 494 2027 Forecast vs. 46 048 2026 Forecast vs. 40 493 2...

AI summary The document outlines changes in Information Technology costs from 2024 to 2027, highlighting increases in labour, contracts, and subscription/software expenses, as well as decreases in consulting costs. Factors include cyber security initiatives, technology upgrades, and cloud-based service transitions.

FORWARD-LOOKING INFORMATION This MD&A contains forward-looking information and statements which reflect the current view with respect to the Company's expectations regarding future growth, results of operations, performance, the scope of t...

AI summary The document outlines forward-looking information in NSPI's MD&A, detailing expectations about the Cybersecurity Incident's impact on financial position, IT systems restoration, and business continuity. It emphasizes that such statements are subject to safe harbor provisions under Canadian securities laws and may not reflect future outcomes.

Cybersecurity Incident: On April 25, 2025, NSPI discovered a cybersecurity incident (the "Cybersecurity Incident") involving unauthorized access into certain parts of its network and servers supporting portions of its business applications...

AI summary NSPI discovered a cybersecurity incident on April 25, 2025, involving unauthorized network access. Incident response protocols were activated, with third-party experts engaged to contain the breach and notify law enforcement. No physical operations were disrupted, and cyber insurance is being utilized for claims. The incident is not expected to have a material financial impact, though $5 million in after-tax costs were recognized in Q2 2025.

RISK MANAGEMENT AND FINANCIAL INSTRUMENTS There have been no material changes in NSPI's risk management profile and practices from those disclosed in the Company's 2024 annual MD&A. In April 2025, NSPI was impacted by a Cybersecurity Incid...

AI summary NSPI's risk management profile and practices have remained largely unchanged since 2024, though a Cybersecurity Incident occurred in April 2025. Further details on the incident and general cybersecurity risks are provided in the 'Developments' and 'Enterprise Risk and Risk Management' sections of the 2024 annual MD&A.

Cybersecurity Incident On April 25, 2025, NSPI discovered a cybersecurity incident (the "Cybersecurity Incident") involving unauthorized access into certain parts of its network and servers supporting portions of its business applications....

AI summary On April 25, 2025, NSPI discovered a cybersecurity incident involving unauthorized access to its network and servers. Incident response protocols were activated, and the company is working with insurers on claims. There was no disruption to physical operations, and the company recognized $5 million in after-tax costs in Q2 2025.

Cybersecurity Incident: On May 14, 2025, the NSEB initiated an inquiry into the Cybersecurity Incident. For further information on the "Cybersecurity Incident", refer to note 1.

AI summary On May 14, 2025, the Nova Scotia Energy Board initiated an inquiry into a Cybersecurity Incident. Further details on the incident are provided in note 1.

Cybersecurity Incident On April 25, 2025, Emera and NSPI discovered a cybersecurity incident (the "Cybersecurity Incident") involving unauthorized access into certain parts of its Canadian network and servers supporting portions of its bus...

AI summary On April 25, 2025, Emera and Nova Scotia Power Inc. discovered a cybersecurity incident involving unauthorized access to parts of their Canadian network. Incident response protocols were activated, and no disruption to physical operations was reported. The impact on financial position or operations is not expected to be material.

Change in ICFR In April 2025, the Company experienced a Cybersecurity Incident that impacted certain financial systems and processes at its Canadian affiliates. As a result, the Company transitioned these to business continuity processes a...

AI summary In April 2025, a Cybersecurity Incident at the Company's Canadian affiliates led to a transition to business continuity processes, resulting in a material change in the Company's ICFR during the quarter ending June 30, 2025. No other material changes to ICFR occurred during this period.

Cybersecurity Incident On April 25, 2025, Emera and NSPI discovered a cybersecurity incident (the "Cybersecurity Incident") involving unauthorized access into certain parts of its Canadian network and servers supporting portions of its bus...

AI summary On April 25, 2025, Emera and NSPI discovered a cybersecurity incident involving unauthorized access to parts of their Canadian network. Incident response protocols were activated, and affected systems were isolated. No physical operations were disrupted, and the Company is working with insurers on claims related to the incident.

Table of Contents (Cont'd) - ◼ Capital Additions Metrics - Capital Employed per Retail Customer - Total Plant Additions as Percent of Total Electric Plant - Total Plant Additions as Percent of Depreciation Expense - Production Additions as...

AI summary The document provides a table of contents for a regulatory proceeding, outlining various metrics related to capital additions, finance and accounting, human resources, supply chain, and information technology, as well as appendices covering technical details of energy infrastructure.

2026-2027 GRA OP-03 Attachment 1 Page 80 of 87 REDACTED (CONFIDENTIAL INFORMATION REMOVED) Information Technology (IT) Metrics

AI summary The document discusses IT metrics as part of the 2026-2027 GRA OP-03 Attachment 1, focusing on information technology performance indicators relevant to the regulatory proceeding.

Key initiatives - Risk oversight, including material ESG risks, at the Emera and operating company boards - Annual Board effectiveness evaluation - Commitments at Emera and operating company boards to diversity and inclusion - Annual say-o...

AI summary The key initiatives outlined include risk oversight, diversity and inclusion commitments, board effectiveness evaluations, say-on-pay votes, cybersecurity protocols, and annual code of conduct training at Emera and its operating companies.

Michelin Managing cyber risk Roll-out of advanced / smart devices Incorporating renewables Leveraging AI Advanced battery storage Customer education along the journey Balancing modernization initiatives with meeting demand growth Skills &...

AI summary The text outlines key initiatives and considerations for managing cyber risk, rolling out advanced devices, incorporating renewables, leveraging AI, and advancing battery storage. It emphasizes the importance of customer education, balancing modernization with demand growth, and skills development in the context of grid modernization and its benefits for customers and shareholders.

on Technological Innovation - Strategic customer-focused growth opportunities - Information technology projects

AI summary The text outlines strategic growth opportunities focused on customers and highlights information technology projects. It includes a placeholder image reference but no detailed discussion of specific initiatives or programs.

SUSTAINABILITY MATERIALITY ASSESSMENT Emera is committed to transparency, accountability, understanding stakeholder expectations and improving disclosures on the material sustainability priorities that matter most to stakeholders. Those su...

AI summary Emera conducts a sustainability materiality assessment to identify key sustainability priorities, categorized as strategic, core, and evolving. These priorities are reviewed annually with the SMC and SRC to ensure alignment with stakeholder interests and business impact. A full update is conducted every three years.

INFORMATION SECURITY OVERSIGHT, CYBERSECURITY AND ARTIFICIAL INTELLIGENCE Emera increasingly relies on information technology ("IT") systems, as well as network and cloud infrastructure, to manage its business and safely operate its assets...

AI summary Emera relies heavily on IT systems and infrastructure, exposing it to cybersecurity risks. The company manages these risks through cybersecurity standards, assessments, and training. Cybersecurity status is reported to the Safety and Risk Committee (SRC) and the Board, which also reviews risks related to AI and emerging technologies.

INFORMATION TECHNOLOGY Emera relies on various IT systems to manage its operations. This subjects Emera to inherent costs and risks associated with maintaining, upgrading, replacing and changing these systems. Emera's digital transformatio...

AI summary Emera relies on IT systems for its operations, which involves costs and risks related to system maintenance and upgrades. The company's digital transformation strategy includes investments in infrastructure and emerging technologies like Generative AI, managed through governance and oversight mechanisms. Annual reports to the Board cover progress on the 5-year technology plan and innovation efforts.

RSC Members (to February 21, 2025): Jochen E. Tilk (Chair) B. Lynn Loewen Brian J. Porter lan E. Robertson Karen H. Sheriff - RSC members were 100% Independent - RSC met in camera without management at every Committee meeting in 2024 The r...

AI summary The RSC, composed of 100% independent members, met in camera without management in 2024. The committee oversaw risk management and sustainability, reviewing cybersecurity, risk frameworks, sustainability reports, compliance programs, and climate-related disclosures, including Bill C-59 Anti-Greenwashing provisions.

Measures Included: Highlights - Completion of the CCS/H2 business model evaluation work. - Annual cybersecurity training completion rate of ≥95%. Achieve an average monthly Cyber Security phish rate of <4.5% following the removal of the be...

AI summary The text outlines key performance measures achieved, including cybersecurity training rates, budget management, system efficiency improvements, and revenue generation. All threshold and target measures were achieved, while stretch measures were only partially met. A 15% payout is noted for the asset management result.

CONFIDENTIAL (Attachment Only) 1 Request IR-13: 2 3 Exhibit N-14(C), 2026-2027 GRA OP 01-15 PCON.pdf, OP-04 Attachment 1. For each of 4 NS Power's listed generating units, please provide in Excel tabular format and by generating 5 unit (no...

AI summary The document requests detailed generation forecasts for NS Power's units for 2026-2027, including hourly output, availability factors, and outage hours. The response explains that the PLEXOS model is unavailable due to a cyber incident, so hourly data cannot be retrieved, but monthly data from prior to the incident is provided in Confidential Attachment 1.

NON-CONFIDENTIAL 1 Request IR-19: 2 3 Reference: N-6 - 2026-2027 GRA Direct Evidence Appendix 7C Page 17-18 of 58 4 Per N-6, (Appendix 7C), page 17-18 of 58, we understand that labour has increased significantly over the period from 2024 c...

AI summary The document requests a breakdown of labour costs and positions related to information technology initiatives from 2024 to 2026/2027, including cybersecurity, technology upgrades, and new customer services. The response outlines the estimated costs and positions for these initiatives.

REDACTED 1 Request IR-20: 2 3 Reference: N-6 - 2026-2027 GRA Direct Evidence Appendix 7C Page 17-18 of 58 4 5 Per N-6, (Appendix 7C), page 17-18 of 58, we understand that consulting expense has 6 increased in 2026 forecast compared to 2024...

AI summary The text discusses an increase in consulting expenses for cyber security in 2026, attributed to support for the cyber security program, improvements to Tableau and Power BI, and inflation. The response explains that the increase is due to the expansion of the cyber security workplan to include both IT and OT environments, requiring ongoing consultant support for strategy, roadmap, and project execution.

REDACTED 1 The increased consulting expense is due to the addition of the delivery/execution of the enhanced 2 Operational Technology (OT) Cyber Program in addition to continuing the Information 3 Technology (IT) Cyber Program. This is an...

AI summary The document outlines increased consulting expenses related to cyber security programs and data analytics tools. The enhanced OT Cyber Program and ongoing IT Cyber Program are cited as reasons for the increase, as well as annual testing of incident response plans and penetration testing. Expenses related to Tableau and Power BI improvements are also discussed.

Cybersecurity Risk NSPI is exposed to potential risks related to cyberattacks, data breaches, cyber-extortion, and unauthorized access that could result in a Material Adverse Effect. The Company relies on IT systems, cloud infrastructure,...

AI summary NSPI faces cybersecurity risks from potential cyberattacks, data breaches, and unauthorized access, which could lead to significant operational and financial impacts. The Company uses IT systems, cloud infrastructure, and third-party services, and must manage risks from evolving cyber threats, including those from nation-state actors. Cybersecurity measures include compliance with standards and regular reporting to the Board of Directors.

NS Power's actual net bad debt expense for 2019 to 2024 is as follows: Year Actual Net Bad Debt Expense 2019 4,777,945 2020 5,785,758 2021 2,280,327 2022 3,386,618 2023 3,843,434 2024 5,379,966 Year Estimated Net Bad Debt Expense 2025 5,06...

AI summary NS Power provided actual net bad debt expenses from 2019 to 2024 and estimated expenses for 2025 to 2027. The NSEB requested a breakdown of costs related to a cybersecurity attack, but NS Power stated it has not prepared a 2026 forecast of recovery costs. Additionally, the NSEB asked for clarification on a $9 million cost reduction in operating costs, with NS Power yet to respond.

anticipated that such work will continue throughout the test period. 1 Request IR-64: 2 3 Reference: Exhibit N-3 Direct Evidence, Exhibit N-6(ii), Information Technology 4 5 Pages 8-9 in the direct evidence notes that the test year forecas...

AI summary The text discusses a request for clarification regarding a significant increase in information technology consulting expenses, particularly related to cybersecurity and tools like Tableau and PowerBI. It also asks whether the increase is ongoing or one-time and requests matter numbers related to these tools.

(approximately 85 percent) is with NSP's cyber security strategic partner, assisting NS Power with its cyber strategy, roadmap, and annual workplan. This partner also plays a key role in the project management, execution, and delivery of s...

AI summary The text discusses NSP's increased consulting expenses related to its cybersecurity strategy, which now includes both IT and OT environments. The additional costs are due to the expansion of the OT Cyber Program, aimed at improving cybersecurity defenses and mitigating risks.

1 Request IR-78: 2 3 Reference: Exhibit N-3, GRA Direct Evidence 4 5 On page 35, NS Power states "Information Technology costs per business entity full-time 6 equivalent employee is significantly below the utility industry median". 7 8 (a)...

AI summary NS Power states that its Information Technology costs per business entity full-time equivalent employee are significantly below the utility industry median, but its IT costs per $1000 of revenue are above the industry median. The response also mentions the implementation of a cybersecurity roadmap and references other exhibits for further details.

M12273 – NS Power, Cybersecurity Incident Monthly Update 2, page 3. October 1, 2025. 1 associated expenditures in its revenue requirement. As provided in part (c), NS Power's 2 DSM expense in the forecast revenue requirement for this Appli...

AI summary The document discusses NS Power's revenue requirement and associated expenditures, particularly focusing on Demand Side Management (DSM) expenses and cybersecurity incident impacts on AMI meter reading. It includes a request and response regarding NS Power's manual reading of AMI meters due to a cybersecurity breach.

(b) This metric is not tracked. Customer-submitted photo or postcard readings are currently used for billing with minimal scrutiny. Meter readings are cumulative. True readings lead to the recovery of any understated usage or underbilled a...

AI summary The document discusses billing practices, including the use of customer-submitted readings and the regulation requiring actual meter readings at specific intervals. It also mentions plans to update online forms as part of cybersecurity recovery efforts and the identification of high-billing exceptions based on predefined thresholds.

- Information Technology The increase of approximately $12.0 million from 2024CR to 2027F is primarily related to the $10.2 million increase from 2024CR to 2026F. The $10.2 million increase is largely attributable - o Increased consulting...

AI summary The text discusses a $12 million increase in Information Technology costs from 2024CR to 2027F, primarily due to increased consulting fees for cyber security programs, improvements in data analytics tools, and higher labour costs from new employee hires. These costs are projected to be ongoing as the company modernizes its technology and enhances its cyber security measures.

intervenors can adequately assess the application and bring forward evidence addressing 2 any concerns they may have, it seems doubtful at this stage that the Board will be in a 3 position to render a decision in the matter by January 1, 2...

AI summary The document discusses the adequacy of NSPI's representation of fuel and purchased power costs in the BCF, noting that data retrieval has been affected by a cybersecurity incident. The hearing is scheduled for January 7, 2026, and the Board may not issue a decision by January 1, 2026.

onsequences. Customers are not given time to absorb one increase before the next one arrives. The result is ongoing uncertainty, repeated rate shock, and an erosion of trust in the electricity system. Throughout 2025, Nova Scotians have de...

AI summary The document highlights ongoing issues with Nova Scotia Power, including frequent rate increases, cybersecurity breaches, billing inaccuracies, and service reliability problems. Customers face financial shocks and distrust due to these issues, while coal reliance continues despite regulatory requirements to phase it out.

onsequences. Customers are not given time to absorb one increase before the next one arrives. The result is ongoing uncertainty, repeated rate shock, and an erosion of trust in the electricity system. Throughout 2025, Nova Scotians have de...

AI summary The document highlights concerns about Nova Scotia Power's repeated rate increases, cybersecurity breach, billing inaccuracies, and unreliable service leading to frequent outages. It also notes continued reliance on coal despite a legislated phase-out, resulting in high and volatile costs for customers.

next phase of Nova Scotia's energy transformation will be complex and is made even more challenging given the current inflationary pressures and the affordability challenge facing many Nova Scotians. The cyber attack also presents a challe...

AI summary Nova Scotia's energy transformation faces challenges due to inflation and affordability issues, compounded by a recent cyber attack. Nova Scotia Power assures the Board that the GRA does not include cyber attack costs and emphasizes efforts to avoid rate increases, including financial arrangements and projects like the Maritime Link and Battery Energy Storage System.

a. Operational Smart Grids The Company proposes $2,608,107 in OSG expenses for the Rate Year, which is the Company's $1,774,562 Test Year expense plus a $833,545 Rate Year adjustment. Late Filed Ex. 1, Att. 2 Supp., Sch. C-3.09 WP. The Tes...

AI summary The Company requested $2,608,107 in OSG expenses for the Rate Year, including $1,774,562 from the Test Year and an $833,545 adjustment. The Authority found that only $1,774,562 from the Test Year and $688,961 in new Rate Year expenses were reasonable, approving a total of $2,463,523 for recovery.

Other Risks and Regulatory and Rate-Setting Mechanisms Utilities have argued that in addition to energy transition, other risks are increasing such as cyber security, changes in sales volumes, extreme weather events, and changes in governm...

AI summary Utilities argue that risks such as cybersecurity and extreme weather have increased, but ratepayer groups and OEB staff claim regulatory mechanisms have reduced utility risk since 2009. The OEB finds no increased risk from energy transition or operations, and notes that Enbridge Gas and OPG will have their risk profiles reviewed in separate proceedings. Trade tariffs are not factored into the new Cost of Capital Framework due to limited evidence.

23 3.10.3 Time-Varying Pricing (TVP) Tariffs - 24 In October 2025, NS Power sought approval to temporarily modify the Domestic, Small General, - 25 and General Critical Peak Pricing (CPP) and Time-of-Use (TOU) Tariffs for the 2025/26 TVP -...

AI summary In October 2025, NS Power requested to temporarily modify several Time-Varying Pricing (TVP) Tariffs due to a cyber incident affecting system functionality. The Board's Order (M12499) allowed NS Power to introduce an Interim Energy Charge based on standard offer rates until system functionality is restored. The updated tariffs are effective from November 2026 and January 2027.

NON-CONFIDENTIAL 1 Request IR-1: 2 3 Section 4.6 of the Board's decision in this matter expressed concern about implementing the 4 rate increase through prorating in the context of the potential for prorating over a period 5 that was longe...

AI summary The document discusses concerns raised about NS Power's meter reading and billing processes following a cybersecurity breach, specifically regarding prorating a rate increase. NS Power responds that its processes have returned to normal, citing restored data connections and system integrations.

above, some increased operational costs also result from Board proceedings involving various customer representatives, including the FAM Audit Dispatch Study and the Interconnection processes matter. [95] NS Power has also proposed increas...

AI summary NS Power has proposed increased OM&G costs to address cyber security and technology upgrades, including consulting fees, new employees, and software updates. The Board accepts these costs as reasonable but notes ongoing proceedings regarding a 2025 cyber incident, which may affect future prudence reviews.

4.6 Implementation of New Rates (Cyber Incident Impact) [727] At the hearing, NS Power said that it now has communication with roughly 400,000 of its customer meters and has targeted the end of March to have all meters (approximately 555,0...

AI summary NS Power discussed implementing new rates affected by a cyber incident, noting challenges in prorating rate changes due to extended meter reading intervals. It acknowledged potential for higher charges during colder periods but emphasized progress with AMI technology, though historical data storage is limited to 60-90 days.

PRELIMINARY ISSUES LIST The following issues will be dealt with in the public hearing on Nova Scotia Power Incorporated's (NS Power) 2026-2027 General Rate Application (Matter M12451) which is set to begin Wednesday, January 7, 2026: - 1....

AI summary The preliminary issues list outlines key topics for the public hearing on NS Power's 2026-2027 General Rate Application. These include fuel and purchased power costs, capital structure, rate design, depreciation studies, cybersecurity impacts, and climate change adaptation. The proceeding will address regulatory compliance, cost recovery, and the impact of various operational and financial factors on rate-setting.

Comment These plans were filed as directed by the Board and were provided as part of the GRA to ensure the Board had the best information possible; however, NS Power is not seeking approval of either plan as part of the GRA process. Given...

AI summary NS Power filed plans as directed by the Board as part of the GRA but is not seeking approval of these plans during the GRA process. They argue the issue does not require further evidence in the hearing. The comment also mentions the impact of a cybersecurity breach on NS Power operations and costs.

Comment As stated on page 5 of the GRA, NS Power recognizes that the cybersecurity attack has impacted customers, and it is committed to limiting that impact as much as it can. To that end, this GRA does not include costs related to the cy...

AI summary NS Power acknowledges the impact of a cybersecurity attack on customers but states that the GRA does not include related costs. The 2026-2027 revenue requirement forecast was developed before the attack and remains unchanged. An ongoing proceeding (M12273) is cited as the appropriate venue to assess the attack's impact on IT investment prudency.

that matter. NS Power said its forecast investment in the GRA test period is consistent with the current plan and further review of the plan itself as part of the GRA would create redundant processes. The Board accepts that the potential f...

AI summary NS Power argues its investment forecast aligns with current plans, while the Board acknowledges concerns about redundant processes. The Board revises the Final Issues List to focus on reliability and investments, noting that NS Power's revenue forecast predates a cybersecurity attack (M12273). The Board emphasizes the proceeding cannot ignore significant issues like the cyber attack's impact on cost accuracy.

FINAL ISSUES LIST The following issues will be dealt with in the public hearing on Nova Scotia Power Incorporated's (NS Power) 2026-2027 General Rate Application (Matter M12451) which is set to begin Wednesday, January 7, 2026: - 1. Fuel a...

AI summary The Final Issues List outlines 21 topics for public hearing on NS Power's 2026-2027 rate application (M12451). Key areas include fuel cost mechanisms, capital structure compliance with the Public Utilities Act, rate design, climate adaptation plans, cybersecurity impacts, and securitization issues. The hearing begins January 7, 2026.

Request IR-19: - Reference: N-6 2026-2027 GRA Direct Evidence Appendix 7C Page 17-18 of 58 - Per N-6, (Appendix 7C), page 17-18 of 58, we understand that labour has increased significantly - over the period from 2024 compliance restated to...

AI summary The text requests a detailed breakdown of labor costs and positions related to IT initiatives, citing increased staffing for cybersecurity, technology upgrades, new customer services, new technology services, and salary increases from 2024 to 2026/2027.

Request IR-20: - Reference: N-6 2026-2027 GRA Direct Evidence Appendix 7C Page 17-18 of 58 - Per N-6, (Appendix 7C), page 17-18 of 58, we understand that consulting expense has increased - in 2026 forecast compared to 2024 compliance resta...

AI summary Request IR-20 seeks clarification on increased consulting expenses in 2026, attributing the rise to cybersecurity support, IT tool enhancements (Tableau/Power BI), and inflation. The request asks for a breakdown, whether the increase is temporary or permanent, and the rationale.

Request IR-21: - Reference: N-6 2026-2027 GRA Direct Evidence Appendix 7C Page 17-18 of 58 - Per N-6, (Appendix 7C), page 17-18 of 58, we understand that rental/maintenance equipment/ - software expense has increased in 2026 forecast compa...

AI summary The document requests clarification on the increase in rental/maintenance equipment/software expenses in 2026, attributed to the cyber security program and inflation, and seeks a detailed breakdown of these costs.

Request IR-40: - Reference: Exhibit N-3 GRA Direct Evidence, Section 1.1 Support for 2026-2027 GRA - On page 8 of the application, NS Power notes that the GRA does not include costs related to the - cybersecurity attack. While not included...

AI summary NS Power states that the GRA for 2026-2027 does not include costs from a cybersecurity attack. The request seeks a detailed breakdown of these anticipated costs and recent forecasts.

Request IR-61: Reference: Exhibit N-6(ii), Communications and Public Affairs - a) The reason given for the increase from 2024 actuals to forecast 2026 expense in labour expense under Communications and Public Affairs is the same as many ot...

AI summary Request IR-61 questions significant increases in labour (48% from 2024 to 2026) and consulting expenses (400% increase) under Communications and Public Affairs, seeking explanations for disparities compared to other categories. It also requests details on advertising initiatives and confirmation that increases are unrelated to a cybersecurity breach.

Request IR-64: Reference: Exhibit N-3 Direct Evidence, Exhibit N-6(ii), Information Technology - Pages 8-9 in the direct evidence notes that the test year forecasts were completed before the - cybersecurity incident occurred, and that the...

AI summary The document requests clarification on a 1000% increase in IT consulting expenses linked to cybersecurity efforts and software upgrades (Tableau, PowerBI) following a cybersecurity incident. It questions whether the spending mitigated incident damage, if expenses are ongoing, and seeks definitions and matter numbers related to Tableau/PowerBI.

Request IR-69: - Reference: Exhibit N-6(ii), Grid Modernization and Customer Integration - There is a forecasted increase of 34% in labour in this category over 2024 actual. The reasons - given are additional resources in the Smart Meter O...

AI summary The document requests details on a 34% labor increase forecast for 2024-2026, including reasons for expanded initiatives and data analytics needs. It questions the necessity of additional Smart Meter Operations Center resources amid a cybersecurity attack's impact on data access, asking about data recovery timelines and storage duration.

Request IR-78: - Reference: Exhibit N-3, GRA Direct Evidence - On page 35, NS Power states "Information Technology costs per business entity full-time - equivalent employee is significantly below the utility industry median". a) Please exp...

AI summary NS Power's assertion that IT costs per FTE are below the industry median is questioned in the context of a recent cybersecurity incident, as part of Exhibit N-3 in the GRA Direct Evidence. The significance of this statement is under scrutiny.

Request IR-144: - Reference: Exhibit N-3 GRA Direct Evidence, Section 13.7, AMI Opt-Out Fee - a) Please describe any limits NS Power currently faces in reading AMI meters over the air as a result of its cybersecurity breach. - b) Please de...

AI summary Request IR-144 seeks information from NS Power regarding cybersecurity breach impacts on AMI meter readings, manual reading arrangements, timelines for resuming automated readings, and the accuracy of cost estimates for manual reading of opt-out customers in 2026–2027.

______________ DATE UND# DESCRIPTION REQUESTED OF FOR DUE DATE January 12, 2026 U-23 As it related to the response to NSEB IR-148: If the "pre-defined dollar value threshold" is a dollar value, provide that value. If not pre-defined, if se...

AI summary The document outlines three requests made by The Board to Nova Scotia Power Inc. (NSPI) related to cybersecurity breach impacts, correction of a table for surplus and bilateral energy, and alignment of numbers with a Board decision. These requests are part of a regulatory proceeding and are due by January 20, 2026.

6% of after-tax income on heat and lights[1](#page-0-0) . 1 Energy Poverty and an Equitable Transition to a Net-Zero Carbon Future in Nova Scotia – EfficiencyOne The Department submits that the Board must assess whether the requested rate...

AI summary The Department argues that NS Power's requested rate changes are not just and reasonable, citing increased profits, service reliability issues, a cyber breach, and excessive rate increases. It asserts NS Power has not met its burden of proof under the Act, considering economic circumstances and the factors outlined.

Cyber Attack - 111. The cyber-attack resulted from circumstances within NS Power's operational control, yet ratepayers bear the financial and operational consequences, including billing uncertainty and potential financial exposure. - 112....

AI summary A cyber-attack on NS Power led to billing uncertainties and financial risks for ratepayers. The Department argues NS Power, as a regulated monopoly, must adhere to strict cybersecurity and service standards under the Public Utilities Act . Investigations are called for into billing practices, consumer protections, and financial relief. NS Power claims not to seek cost recovery, but ratepayers may bear indirect costs. The Board is urged to address accountability and transparency.

Timing of any rate increase awarded. - 119. As a result of the cyber-attack, NS Power was unable to deliver accurate bills to customers, resulting in estimated bills which have in many cases been well above what ratepayers were charged for...

AI summary The document discusses the impact of a cyber-attack on NS Power's billing accuracy, with only 400,000 of 550,000 meters restored. The Department raises concerns about data accuracy, meter restoration timelines, and the fairness of prorating rates during high winter usage. It argues that rate increases should not take effect until current usage is not charged at higher rates, with costs of delays borne by shareholders.

Summary - 124. In summary, the Department of Energy respectfully requests as follows: - a. That the Board reject the requested rate changes. - b. That NS Power's ROE be set at 7.6%. - c. That the Board take steps to ensure that NS Power's...

AI summary The Department of Energy requests the Board to reject NS Power's rate changes, set ROE at 7.6%, write down coal assets, deny Lingan 2 investment, avoid securitization, reject labour cost increases, maintain deferred liability calculations, address cyber-attack costs, and delay rate hikes until ratepayer liability is confirmed. It also urges mitigation of ratepayer impacts.

1 2 g) Cyber-attack 3 4 The DOE submission states: 5 The evidence supports the conclusion that the cyber-attack drew internal resources. 6 Even responding to customers reaching out about concerns with estimated bills or 7 other issues aris...

AI summary NS Power denies that cyber-attack costs are included in the GRA, stating the GRA predates the attack and customer service costs are normal operations. The DOE argues ratepayers may bear indirect costs. The discussion focuses on cyber-attack implications and rate implementation.

above, some increased operational costs also result from Board proceedings involving various customer representatives, including the FAM Audit Dispatch Study and the Interconnection processes matter. [95] NS Power has also proposed increas...

AI summary NS Power has proposed increased OM&G costs totaling $10.2 million from 2024CR to 2026 and $1.8 million in 2027, primarily due to cyber security and technology upgrades. The Board accepts these costs as necessary and reasonable but notes that ongoing proceedings (M12273 and M12600) regarding a 2025 cyber incident may lead to findings of imprudence if warranted.

3.9.1.1 Findings [647] The Board accepts that NS Power is engaged in appropriate activities relating to the development of new rate designs. However, the Board believes that more can be done and encourages NS Power to do so. For example, w...

AI summary The Board acknowledges NS Power's efforts in developing new rate designs but urges improvement, noting limited customer rate options and operational challenges from outdated systems and a cyber attack. The TVP program's suspension highlights these issues, while Bonbright's criteria emphasize dynamic rate structures aligned with energy transition goals.

4.6 Implementation of New Rates (Cyber Incident Impact) [727] At the hearing, NS Power said that it now has communication with roughly 400,000 of its customer meters and has targeted the end of March to have all meters (approximately 555,0...

AI summary NS Power discusses challenges in implementing new rates due to a cyber incident, including prorating rate changes and potential billing discrepancies from extended intervals between meter reads. It notes progress in deploying AMI technology, with 400,000 meters communicating and a target of full deployment by March. Historical data recovery is limited to 60–90 days without interval usage details.

Request IR-1: - Section 4.6 of the Board's decision in this matter expressed concern about implementing the rate - increase through prorating in the context of the potential for prorating over a period that was longer - than a single billi...

AI summary The Board's decision (Section 4.6) raised concerns about prorating rate increases over extended billing periods due to a cybersecurity breach, but NS Power's compliance filing didn't address prolonged billing issues. The request asks whether NS Power's processes have returned to normal and how ongoing impacts might affect prorating.

Request IR-7: - NS Power stated that additional billing periods or split billing periods could impact other systems - that rely on the billing data and mentioned that the MyEnergy Insights tool provides personalized - energy usage and bill...

AI summary NS Power asserts that additional or split billing periods may affect systems reliant on billing data, including the MyEnergy Insights tool. The request asks for details on impacted systems, how varying billing durations are handled, potential impacts on the tool, effects of a cybersecurity breach, and confirmation of the tool's ability to display daily energy usage averages.

OPENING STATEMENT 13 AFFORDABLE ENERGY COALITION 1 has been taken. We submit that the Board could review 7 proposal that would force families to pay hundreds of 8 dollars more each year for electricity by increasing 9 standard residential...

AI summary The Affordable Energy Coalition argues that Nova Scotia Power's repeated rate increases, combined with a cybersecurity breach and frequent unplanned outages, create financial and operational instability for customers. These issues, including unpredictable billing and lack of trust, are seen as a pattern of poor management and insufficient customer support.

OPENING STATEMENT 25 NOVA SCOTIA LIBERAL CAUCUS 1 households and businesses with predictable electricity 7 million by 2027, a 50 percent increase in just four years. 8 Nova Scotia Power is asking people to 9 pay more while their corporate...

AI summary The Nova Scotia Liberal Caucus opening statement highlights concerns about rising electricity costs, stagnant household income, unreliable power, data breaches, and declining trust in Nova Scotia Power. It criticizes the company for increasing profits while service quality decreases and notes the impact of a recent data breach on customers.

NSP COST OF SERVICE PANEL 45 Questions, (Deveau) 1 evidence but did not go to an oral hearing, 1 energy transformation will be complex, and it is made even 2 more challenging given the current inflationary pressures 3 and the affordability...

AI summary The document discusses the challenges Nova Scotia Power faces, including energy transformation, inflationary pressures, affordability issues, and the impact of a recent cyber attack. The company reassures stakeholders of its commitment to recovery and rebuilding trust, while noting that the GRA does not include costs related to the cyber attack.

g to understand how much a usage customer has made of your electricity, we have to be INTERNATIONAL REPORTING INC. CERTIFIED COURT REPORTERS able to rely on the meter and that communication, also to 1 some degree rely on meter readers. Now...

AI summary The discussion focuses on Nova Scotia Power's efforts to restore accurate meter reading following a cyber incident, with a goal set for March 2026. The Board is asked if Nova Scotia Power will provide regular updates on progress toward this goal.

we need to call this up, but it's Exhibit N-8 at Appendix 13(c), Nova Scotia Power had indicated that it received approximately 650 inbound calls from opt-out customers back in 2024. And you estimated associated customer care expenses with...

AI summary The discussion references Nova Scotia Power's handling of customer care expenses related to opt-out customers, specifically mentioning 650 inbound calls in 2024 with an estimated cost of $10,000. The conversation also touches on challenges with communicating with customers prior to a cyberattack and the impact of opt-out decisions on meter numbers.

1 public if you're not measuring what they're saying? 4 and public affairs function and service to the company. 5 They're not necessarily subject matter experts. And so 6 while we could prepare those people to go out, it's more 7 effective...

AI summary The text discusses the importance of having subject matter experts engage with the public, rather than general staff, to provide detailed and confident responses to customer inquiries. It also mentions the role of the Public Affairs and Communications Teams in supporting other departments in messaging. The conversation then shifts to discussing the cost of implementing cybersecurity measures.

INTERNATIONAL REPORTING INC. CERTIFIED COURT REPORTERS 1 for increased consulting fees, improvements to the 2 software for Tableau and Power BI; $3.8 million for new 3 technology services, increased labour. So I'm not going 4 to go into th...

AI summary The text discusses increased consulting fees, technology services, and labor costs, as well as cybersecurity breach costs not included in the application. It also mentions hiring meter readers for manual bill reading.

LIST OF EXHIBITS EXHIBIT NO. DESCRIPTION PAGE NO. U-20 To advise how unit values for the purchases and the benefit calculations were determined and show how NSPI determined unit cost for non-Maritime Link energy 773 NO. PAGE NO. U-21 To pr...

AI summary The document lists exhibits related to Nova Scotia Power's capital investments, energy purchases, and cybersecurity breach impacts. It includes information on compliance filings, project exclusions, and billing threshold processes.

INTERNATIONAL REPORTING INC. CERTIFIED COURT REPORTERS 1 system is specific to the customer. 2 Q. Okay. And the threshold that's 3 defined for the specific customer, what is that? Is it 10 4 percent higher than average, 15 percent? How is...

AI summary The discussion centers on a billing threshold system specific to customers, with questions about its definition, whether it is pre-defined or customer-specific, and how it was affected by a cybersecurity breach and recent billing concerns.

1 So are you able to provide all that in 2 an undertaking response? 3 A. (Williams) Yes, sir. 4 THE CHAIR: Okay. So that will be 5 Undertaking U-23. 6 UNDERTAKING U-23 - If the "pre 7 defined dollar value threshold" 8 is a dollar value, pr...

AI summary The text discusses an undertaking response related to a predefined dollar value threshold and its impact following a cybersecurity breach. It also references a workforce continuity issue in an Integrated Resource (IR) filing from Nova Scotia Power, highlighting incomplete responses to an information request.

LIST OF EXHIBITS EXHIBIT NO. DESCRIPTION PAGE NO. NO. PAGE NO. January 9, 2026 U-21 To provide Nova Scotia Power's actual level of capital investment in '23 and '24 as compared to what was included in the '22 GRA compliance filing 807 U-22...

AI summary The document lists exhibits submitted in a regulatory proceeding, including details on capital investment, project exclusions, and cybersecurity breach impacts on billing processes. The session resumes with the examination of Board counsel witness panels.

Questions, (Chair) 1 just saying the magnitude of that difference and the 6 So obviously, in Nova Scotia we're 7 well aware of the cyber incident. It still impacts the 8 company now. But I'm just you made the comment and 9 you would have h...

AI summary The Chair raises concerns about Nova Scotia Power's cyber incident and its impact on data availability and the ability to assess their fuel budget and revenue requirement. The response indicates no significant concerns, emphasizing transparency in the review process.

Ottawa, Ontario PAGE NO. January 9, 2026 U-21 To provide Nova Scotia Power's actual level of capital investment in '23 and '24 as compared to what was included in the '22 GRA compliance filing 807 U-22 To provide information on why the two...

AI summary The document contains several items from a regulatory proceeding in Nova Scotia, including requests for information on capital investment, project exclusions, and billing thresholds, as well as confidential items. These items relate to compliance filings, cybersecurity impacts, and billing concerns.

LIST OF EXHIBITS EXHIBIT NO. DESCRIPTION PAGE NO. U-19 To provide what is the union versus non-union split of the additional 507 full-time employees, number one, and what is the revenue requirement impact of adding those 507 positions 749...

AI summary The document lists various exhibits related to Nova Scotia Power's operations, including employee splits, capital investments, project inclusions, and cybersecurity impacts on billing processes. These exhibits address regulatory and operational concerns raised during a proceeding.