Breach Timeline
Breach Timeline - On or around March 19, 2025, a Nova Scotia Power employee visited a website that had been compromised by the "SocGholish" (FakeUpdates) malware. The employee clicked on a link in a pop-up on that site, which resulted in m...
AI summary A breach occurred at Nova Scotia Power starting in March 2025 when an employee clicked on a malicious link, leading to malware installation. The threat actor gained access, moved laterally, exfiltrated data, and deployed ransomware. The breach was discovered on April 25, 2025, and the company did not pay a ransom despite threats from the attacker.