Topic/Matter Intersection

Topic:"Regulatory Compliance" in M12273

Matter: Board Inquiry into Nova Scotia Power's Cybersecurity Incident
28 passages 18 documents

Regulatory Compliance across all matters →

N-1Letters of Comment - Redacted 5 passages
Section 2
ficer of the Province of Nova Scotia Tim Houston acting as President of the Province of Nova Scotia Becky Druhan acting as Minister of Justice and Attorney General for the Province of Nova Scotia Please find attached an Administrative Dema...

AI summary An administrative demand for structural redress is filed against Nova Scotia Power (NS Power) for using unconscionable contracting mechanisms and the Nova Scotia Energy and Regulatory Boards Tribunal (NSERBT) for governance failures. The claim cites unlawful contract formation under Regulation 2.2, NSERBT’s procedural inaction, and systemic administrative failure confirmed by an identity breach. The petitioner requests formal review and accountability from the Executive Council Office.

Section 5
passive access as lawful consent - confirms that the regulatory system is enforcing what appears to be contracts of adhesion in direct contradiction to Canadian legal standards of equity and consent. 3. Identity Breach as Confirmation of A...

AI summary The text critiques NS Power's contractual practices as unfair and lacking informed consent, citing an identity breach as evidence of systemic failures. It accuses NSERBT of enforcing invalid contracts and demands regulatory review. The author claims residents are bound to a monopoly utility with no remedy, calling for accountability from the Executive Council overseeing NSERBT.

Section 55
Telephone (902) 428- 6202, Toll-free 1-877-428-6202, Fax (902) 835-7744 [email protected] Sean Kelly In response to your following and attached email messages, I will begin with my Role Statement as Dispute Resolution Officer...

AI summary Sean Kelly, a Dispute Resolution Officer (DRO) appointed by Nova Scotia Power, explains his role in addressing disputes between the company and its customers. He clarifies that his decisions are binding on Nova Scotia Power but not on customers, who may appeal to the Board. He also notes that he cannot assist with disputes not related to NSUARB approved regulations.

Section 72
Page 2 of 3 This subscription retails for nearly $600 over two years, yet I was never asked whether I wanted this third-party service. Many Canadians already receive similar coverage at no cost through their banks or credit card providers....

AI summary The consumer, Danielle Kristine Maillet, expresses concerns about NSPower's billing practices, lack of consent for third-party services, and security issues following a data breach. She requests the Board to investigate NSPower's compliance with ethical and regulatory standards and to provide remedies for affected customers.

Section 102
Page 3 of 5 Equally troubling is the pace of NSP’s response: the breach occurred on March 19, 2025, but NSP only became aware on April 25, 2025 — a full 37 days after the initial intrusion — and some customers did not receive notifications...

AI summary The text criticizes Nova Scotia Power (NSP) for its delayed response to a data breach and lack of transparency. It calls for a public forensic report, regular updates, and a two-year moratorium on rate increases to rebuild trust. The breach occurred in March 2025, but NSP did not become aware until April 25, 2025, and some customers were notified 63 days later.

N-2NSPI (NSEB) RIR 1 to 12 - Redacted 1 passage
Section 25
1 these community sessions have been held to date, and have assisted hundreds of customers 2 in signing up for the service. The NS Power website also has been updated with additional 3 tips and tools to help customers navigate support serv...

AI summary NS Power has conducted community sessions to support customer engagement, updated its website with tools, and implemented cybersecurity measures aligned with NIST and NERC standards. The company conducts regular training, audits, and compliance reviews to ensure robust cybersecurity practices.

N-5Refiled Incident Report - NSPI - Redacted 3 passages
Section 93
1 The OPC initiated an investigation into the Incident on May 28, 2025, and the Company is 2 actively and fully cooperating with the OPC to support the OPC’s investigative efforts. 3 The Company has also provided updates to the Nova Scotia...

AI summary The OPC initiated an investigation into an incident on May 28, 2025, and the Company is fully cooperating. The incident did not disrupt operations or impact customer service. The Company has taken a transparent approach, communicating through various channels to inform affected individuals and stakeholders.

Section 96
1 the NS Power website and information appeared as the top search result when customers 2 used search engines (i.e. Google) to find information about the Incident. Social media 3 accounts have been regularly monitored, and where appropriat...

AI summary NS Power informed customers about a cybersecurity incident, providing updates on the impact of the incident and encouraging vigilance against scams. Notifications were sent to affected customers, and third-party service providers were engaged to assist with the process.

Section 192
tion in accessing its internal resources and external advisors, and assumes that any such external advisors will execute a confidentiality undertaking prior to their receipt of such confidential data. Similarly, NS Power is assuming that a...

AI summary NS Power outlines its approach to handling confidential data in the cybersecurity incident proceeding, including requiring confidentiality undertakings from external advisors and intervenors. It also confirms its commitment to providing timely responses to the Board's information requests and submitting the Incident Report by December 31, 2025.

98924Board letter re additional information required 1 passage
Section 3
This is further to your public and “Board Confidential” letters sent to the Nova Scotia Energy Board on August 8, 2025. The Board panel considering this matter is Stephen T. McGrath, K.C., Chair, Roland A. Deveau, K.C., Vice Chair, and Ric...

AI summary The Nova Scotia Energy Board investigates a utility's cybersecurity practices following a breach, assessing prudence, infrastructure impact, customer service, and data handling. The Board asserts authority under the Public Utilities Act to examine compliance and determine cost recovery reasonableness.

99535NSPI Monthly Update Report #2 3 passages
Section 1
October 1, 2025 Crystal Henwood Clerk of the Board Nova Scotia Energy Board 1601 Lower Water Street, 3rd Floor Halifax, NS B3J 3S3 Re: M12273 – Nova Scotia Power’s Cybersecurity Incident – Monthly Update 2 Dear Ms. Henwood: On July 14, 202...

AI summary Nova Scotia Power (NS Power) is providing monthly updates to the Nova Scotia Energy Board (NSEB) on its response to a cybersecurity incident and progress on the Incident Report, due by December 31, 2025. The Board directed monthly reports following the incident, with expanded guidance provided in September 2025.

Section 5
et management, and regulatory reporting tools. This required business units to adopt manual processes and alternate reporting approaches to maintain continuity of operations and regulatory compliance. Core trading functions have now been s...

AI summary NS Power is stabilizing core trading functions and restoring operational systems, with ongoing efforts in performance and fuel data systems. The Recovery Program Office (RPO) coordinates recovery efforts, ensuring structured governance and progress reporting across the enterprise.

Section 34
ial processes, payroll, storm response readiness, and energy trading capabilities. These functions have been stabilized or are progressing through restoration in line with the integrated program plan. The next wave of effort is centered on...

AI summary The document outlines progress in stabilizing operational functions, advancing business enablement systems, and addressing the OPC investigation. Business continuity measures are maintained, with full cooperation with the OPC and commitment to resolving the investigation efficiently. Judith Ferguson, Executive Vice President, oversees these efforts.

99874NSPI Monthly Update Report #3 1 passage
Section 6
onsideration upon completion. Recovery Timeline NS Power’s efforts have continued to focus on restoring the most critical business functions. Those functions are enabled by supporting technology such as enterprise reporting, data integrati...

AI summary Nova Scotia Power (NSP) outlines ongoing recovery efforts to restore critical business functions, with full restoration expected through 2026. NSP also confirms continued cooperation with the Office of the Privacy Commissioner of Canada (OPC) regarding an ongoing investigation into the incident.

99920Board Letter re: Directives 1 passage
Section 2
Board panel considering this matter is Stephen T. McGrath, K.C., Chair; Roland A. Deveau, K.C., Vice Chair; and Richard J. Melanson, LL.B., Member. The items addressed in Monthly Update #3 included: • The first of three phases of financial...

AI summary The Board panel outlines updates on NS Power's financial systems, including delayed AMI data availability, ongoing Fuel Adjustment Mechanism audit impacts, and the Privacy Commissioner's investigation. NS Power anticipates resolving pending invoices by year-end and submitting an Incident Report by December 2025.

100161NSPI Monthly Update Report #4 2 passages
Section 1
December 1, 2025 Crystal Henwood Clerk of the Board Nova Scotia Energy Board 1601 Lower Water Street, 3rd Floor Halifax, NS B3J 3S3 Re: M12273 – Nova Scotia Power’s Cybersecurity Incident – Monthly Update 4 Dear Ms. Henwood: On July 14, 20...

AI summary Nova Scotia Power is required to settle vendor dues and provide a detailed Gantt chart in its cybersecurity incident report by December 31, 2025, as directed by the Nova Scotia Energy Board. The Board also referred the matter to MNP for investigation into data handling practices.

Section 14
oint-Use Agreement Proceeding (M12149), June 16, 2025. 6 SBA IR-2, Joint-Use Agreement Proceeding (M12149), June 16, 2025. Page 8 of 9 December 1, 2025 C. Henwood Update on OPC Investigation As noted in previous reports, the Office of the...

AI summary The document details ongoing OPC investigation into a cyber incident, Nova Scotia Power's cooperation, and a committee appearance by executives. The company apologized for customer disruption and emphasized commitment to resolving the investigation. The Standing Committee on Natural Resources and Economic Development was briefed on the incident.

100429Letter NSPI re: confidentiality of report 1 passage
Section 1
PO Box 910 Halifax, Nova Scotia Canada B3J 2W5 December 22, 2025 Crystal Henwood Clerk of the Board Nova Scotia Energy Board 3rd Floor, 1601 Lower Water Street Halifax, Nova Scotia B3J 3P6 Dear Ms. Henwood: M12273 – Inquiry of the Nova Sco...

AI summary Nova Scotia Power Inc. (NS Power) submitted a cybersecurity incident report to the Nova Scotia Energy Board, requesting confidential treatment for sections detailing the incident timeline, affected systems, and response actions. The report references Rule 12(2) of the Board's Regulatory Rules to justify confidentiality.

100677Affidavit - MacGillivray Law 1 passage
Section 4
the accuracy of the information provided. METHODS BY WHICH INFORMATION WAS RECEIVED 7. During the relevant period, complaints and inquiries were received through the following channels: a. telephone calls to the firm 's main phone line tha...

AI summary The document outlines methods for receiving complaints (telephone and online), collected contact information (name, phone, email), and estimates over 300 calls and 200 leads related to Nova Scotia Power. No identity verification of contacts was performed, and inquiries were directed to complete intake forms.

100751Letter MacGillivray Law re: Withdrawal of Notice of intervention 1 passage
Section 1
January 28, 2026 Jamie MacGillivray, CEO [email protected] Via NSEB Web Portal MacGillivray Law - New Glasgow 134 Provost Street PO Box 753 New Glasgow, NS B2H 2P7 Crystal Henwood Ph: 902-755-0398 Fax: 902-755-2813 Regulatory Af...

AI summary The letter withdraws Danielle Fraser's intervention in M12273, citing jurisdictional limits of the Nova Scotia Energy Board regarding NSP's cybersecurity breach. The client argues the matter requires judicial remedies beyond regulatory proceedings, emphasizing concerns outside the Board's mandate.

100840NSPI Monthly Update Report #5 1 passage
Section 7
een made in strengthening foundational platforms such as reporting, data integration, network infrastructure and system access, all of which underpin core operational and customer-facing capabilities. Meaningful advancement has occurred ac...

AI summary NS Power outlines progress in restoring technology infrastructure, including system enhancements and collaboration with the Office of the Privacy Commissioner of Canada (OPC) regarding an ongoing investigation. Efforts focus on operational resilience, stakeholder transparency, and alignment with long-term business goals through the Recovery Program Office.

101155NSPI Monthly Update Report #6 2 passages
Section 5
rform reliably under normal operating conditions, strengthening disaster recovery and resilience capabilities, sequencing remaining restoration work to minimize operational, customer and control risk. The Recovery Program Office continues...

AI summary The document outlines NS Power's recovery program management, emphasizing interdependency handling, governance, and regulatory compliance. It mentions formal project oversight mechanisms and updates on the OPC investigation, with NS Power committed to cooperating fully. Cybersecurity initiatives and restoration progress are highlighted.

Section 36
expected to be reconnected by the end of March 2026. Affiliate Code of Conduct Update: Access to several internal financial systems and datasets remains limited. Consequently, portions of the financial analysis that would typically be comp...

AI summary The 2025 Affiliate Code of Conduct (ACOC) report faces delays due to limited access to internal financial systems, requiring manual work and an extension. NS Power will file a letter with the NSEB outlining the timeline for submission. Interconnection processes are mentioned but not detailed.

101499Board letter re: updated documents 1 passage
Section 2
xhibit N-2(C)); and • NS Power’s Cybersecurity Incident Report dated December 22, 2025 (Exhibit N- 3(C)). Document: 329295 -2- NS Power is directed to file updated documents no later than Monday, April 20, 2026. Yours very truly, Crystal H...

AI summary The document references NS Power's cybersecurity incident report (Exhibit N-3(C)) and directs the company to submit updated filings by April 20, 2026. It includes a directive from the Board's clerk and references to board counsel and matter numbers.

101537NSPI Monthly Update Report #7 1 passage
Section 5
ybersecurity restoration toward more stable, repeatable security operations, as planned. Remaining work continues to be sequenced to manage risk and align with recovery priorities. Recovery Timeline Recovery execution continued under estab...

AI summary NS Power's cybersecurity recovery efforts focus on stable operations, risk management, and completing system restorations by 2026. The OPC investigation into the 2025 cyberattack was suspended pending NS Power's fulfillment of commitments outlined in a Compliance Letter.

101655Letter from NSPI requesting extension to file updated documents 1 passage
Section 1
PO Box 910 Halifax, Nova Scotia Canada B3J 2W5 April 20, 2026 Crystal Henwood Clerk of the Board Nova Scotia Energy Board 1601 Lower Water Street, 3rd Floor Halifax, NS B3J 3S3 Re: M12273 – Board Inquiry into Nova Scotia Power Incorporated...

AI summary Nova Scotia Power Inc. (NS Power) is responding to the Nova Scotia Energy Board's request to refile documents related to a cybersecurity incident, removing redactions now that information has been publicly disclosed. NS Power seeks an extension until April 27, 2026, to complete the process.

101752Letter NSPI re: Refiling document as requested 1 passage
Section 1
PO Box 910 Halifax, Nova Scotia Canada B3J 2W5 April 27, 2026 Crystal Henwood Clerk of the Board Nova Scotia Energy Board 1601 Lower Water Street, 3rd Floor Halifax, NS B3J 3S3 Re: M12273 Board Inquiry into NS Power Cybersecurity Incident...

AI summary Nova Scotia Power Inc. (NS Power) is resubmitting documents to the Nova Scotia Energy Board with updated redactions following the Board's request to align with publicly disclosed information related to a cybersecurity incident inquiry (M12273).

102001NSPI Monthly Update Report #8 1 passage
Section 20
Cybersecurity Incident - Monthly Update 8 Attachment 2 Page 4 of 5 Report 2 - Report 3 - Report 4 - Report 5 - Report 6 - Report 7 - Report 8 - Forecast Restoration of Normal Affected Regulatory Matters October 1 November 3 December 1 Febr...

AI summary The document outlines cybersecurity incident updates and regulatory matters affected by the incident, including a timeline of reports and updates to the Affiliate Code of Conduct, with the latest update dated May 11, 2026.

Disclaimer: These summaries were generated by AI from the filings they describe. We take care to make them accurate, but errors are possible - and they aren't advice. Only the filings themselves are the record: if you're relying on something here, confirm it against the source documents or the Nova Scotia Energy Board's own record. Full disclaimer →