Topic:"Regulatory Oversight" in M12273

From: Painting-MacLean, Kimberly To: Painting-MacLean, Kimberly Subject: M12273 Administrative Demand for Structural Redress – NSUARB Oversight Failure and NS Power Identity Breach Date: May 23, 2025 10:11:33 AM Attachments: Administrative...

AI summary An administrative demand for structural redress is made regarding NSUARB oversight failures and an NS Power identity breach. The email, sent to Nova Scotia provincial officials, references attachments including NSERBT decisions and formal responses related to matters M11099 and M11411, highlighting concerns over regulatory compliance and contractual structures.

ficer of the Province of Nova Scotia Tim Houston acting as President of the Province of Nova Scotia Becky Druhan acting as Minister of Justice and Attorney General for the Province of Nova Scotia Please find attached an Administrative Dema...

AI summary An administrative demand for structural redress is filed against Nova Scotia Power (NS Power) for using unconscionable contracting mechanisms and the Nova Scotia Energy and Regulatory Boards Tribunal (NSERBT) for governance failures. The claim cites unlawful contract formation under Regulation 2.2, NSERBT’s procedural inaction, and systemic administrative failure confirmed by an identity breach. The petitioner requests formal review and accountability from the Executive Council Office.

served. Cc: Lisa Wallace acting as Chief Clerk of the Nova Scotia Energy and Regulatory Boards Tribunal Kim Adair acting as Auditor General for the Office of the Auditor General of Nova Scotia Email constitutes delivery per: [cf] Leoppky v...

AI summary A Nova Scotia resident demands structural redress for systemic governance failures and unlawful contracting mechanisms enabled by NSERBT oversight, citing an identity breach by NS Power. The letter highlights risks to residents and calls for investigation and correction by provincial officials.

passive access as lawful consent - confirms that the regulatory system is enforcing what appears to be contracts of adhesion in direct contradiction to Canadian legal standards of equity and consent. 3. Identity Breach as Confirmation of A...

AI summary The text critiques NS Power's contractual practices as unfair and lacking informed consent, citing an identity breach as evidence of systemic failures. It accuses NSERBT of enforcing invalid contracts and demands regulatory review. The author claims residents are bound to a monopoly utility with no remedy, calling for accountability from the Executive Council overseeing NSERBT.

as lawful contracting authority 2.​ An investigation into whether residents of Nova Scotia are being unlawfully subrogated into contracts of adhesion with NS Power without informed consent 3.​ A public disclosure of how the NSERBT monitors...

AI summary The document demands investigations into unlawful contract practices by NS Power, transparency in fiduciary compliance monitoring by NSERBT, a moratorium on rate increases until contractual consent is proven, and clarity on ministerial accountability for NS Power's residential contracts. It asserts systemic failures in regulatory oversight and equitable service delivery in a monopolized sector.

aspects as a cost will be downloaded to the voters who are also customers. Where is the fairness? NSP has not maintained upgrades to the grid in an acceptable manner, nor to its data infrastructure. I am very angry about this as I have no...

AI summary Katie Campbell criticizes NSP for poor grid/data infrastructure maintenance and lack of alternatives, demanding government intervention. A DRO decision on May 13, 2025, addresses a complaint about mishandled data breaches, delayed notifications, and unresolved privacy issues.

making cyber security vulnerabilities a priority has resulted in mine and 280,000 other Nova Scotians vital credit information to be stolen and sold on the Dark Web. My financial vulnerability was wholly avoidable if NS Power had acted muc...

AI summary A data breach involving NS Power exposed 280,000 Nova Scotians' credit information due to cybersecurity vulnerabilities. The complainant criticizes NS Power for delayed action and demands the NS Energy Board improve consumer protection and regulatory oversight. Supporting documents include security risk analyses and privacy complaints.

and what information was received, and, if applicable, what specific information, including the entity from which the information was derived, did an unauthorized third party gain access? What level of accountability will NSP and/or the Go...

AI summary The complainant alleges unauthorized access to personal information by NSP, attributing the breach to inadequate safeguards and the government's sale of the power entity to NSP without ensuring data protection. They demand accountability from NSP and the government, criticizing the monopoly and lack of safeguards.

nt of NS exacerbated the situation by permitting NSP to have a monopoly. Thank you for your assistance with this extremely important matter. Warm Regards, Type of complaint: Other

AI summary The text highlights a complaint that the actions of Nova Scotia (NS) exacerbated a situation by allowing Nova Scotia Power (NSP) to maintain a monopoly. The complainant emphasizes the significance of the matter.

Additional details: I'm one of the thousands of people who's personal and financial information was compromised by a ransomware attack against NS Power. We are now vulnerable to identity thieves who picked up our sensitive information on t...

AI summary A customer of NS Power reports a data breach due to a ransomware attack, leaving personal and financial information exposed. NS Power offered limited credit monitoring services, but the customer argues that government oversight would have prevented the breach and demands stronger legal protections for affected consumers.

ite is convoluted for many of us and only offers monitoring services, which we, the victims, are responsible keep track of. There is no legal protection. Page 2 of 4 What I have been able to do so far is: -Informed my credit card company o...

AI summary A consumer reports identity theft and fraud, criticizing NS Power for inadequate notice and consumer protection. They describe limited actions taken (credit card alerts, mytrueidentity, CRA issues) and argue that government oversight would prevent such vulnerabilities. The complainant feels marginalized, with no decision-making input from NS Power during the ransom consideration.

appointed by the boards continuous approval of NSPowers requests for rate increases despite the cost of living in Nova Scotia already being at all time highs and wages not keeping pace with inflation. If the board continues to act as a rub...

AI summary The text contains two letters of complaint. The first criticizes the Nova Scotia Utility and Review Board for approving rate increases by NSP despite high living costs and stagnant wages. The second letter expresses concern over the collection of personal information, including SIN, and criticizes NSP's IT security practices.

ption appears to have left the onus with internal NS Power IT employees to setup new server hardware and software and to perform routinely and timely software updates on this new software as required. As I understand it, NS Power is oblige...

AI summary The document highlights concerns about NS Power's delayed implementation of cybersecurity measures for its corporate network, noting that the project was put on hold from 2017 to 2018 due to dependencies with other IT work. Despite known threats, the corporate network lacks adequate safeguards, raising questions about regulatory oversight and resource allocation.

From: Painting-MacLean, Kimberly To: Painting-MacLean, Kimberly Subject: FW: DRO 31 May re Sean Kelly re Data Breech Date: June 4, 2025 9:50:04 AM From: Sean Kelly Sent: June 3, 2025 10:27 PM To: [email protected] Cc: customer...

AI summary Sean Kelly criticizes the poor quality of regulations, arguing they favor the company and neglect customer privacy and data security. He questions the board's role in protecting Nova Scotians and highlights the lack of clarity on who is responsible for creating the regulations. He also references CMMC data security requirements and requests a meeting with the board.

ng to formally submit a complaint against Nova Scotia Power Inc. (NS Power) regarding the company’s recent handling of a data breach incident and its lack of customer communication and accountability. I was recently notified by NS Power vi...

AI summary A customer of Nova Scotia Power Inc. (NS Power) is filing a complaint with the NSUARB regarding the company's handling of a data breach, lack of communication, and absence of customer support. The customer is concerned about privacy violations, lack of transparency, and potential financial harm.

Page 3 of 5 Equally troubling is the pace of NSP’s response: the breach occurred on March 19, 2025, but NSP only became aware on April 25, 2025 — a full 37 days after the initial intrusion — and some customers did not receive notifications...

AI summary The text criticizes Nova Scotia Power (NSP) for its delayed response to a data breach and lack of transparency. It calls for a public forensic report, regular updates, and a two-year moratorium on rate increases to rebuild trust. The breach occurred in March 2025, but NSP did not become aware until April 25, 2025, and some customers were notified 63 days later.

ny rate increases is a reasonable and necessary measure while trust is being rebuilt. Finally, regulators should require a third party audit of NSP’s supply chain and cyber defences. Longer term, this incident should prompt legislative and...

AI summary The text argues that rate increases are necessary while trust is rebuilt, calls for third-party audits of NSP’s supply chain and cyber defences, and advocates for legislative changes to improve breach notification and cyber security standards. It questions the justification for paying higher bills and emphasizes the need for competence and accountability from NSP.

ting NS families in harm's way, due to their houses potentially catching fire. The only way to opt out is to pay an additional fee, creating for financial stress on top of back-to-back rate increases. If that isn't enough, now they are est...

AI summary A single mother expresses frustration with Nova Scotia Power's rate increases and billing inaccuracies, which are causing financial stress for families. She calls for a comprehensive financial and operational audit of the company, citing concerns about the CEO's compensation and the approval of excessive rate hikes by the utility board.

ively and fully cooperating with the OPC to support the OPC’s investigative efforts. 26 The Company has also provided updates to the Nova Scotia Energy Board, as well as other 27 relevant government officials throughout the Incident and in...

AI summary Nova Scotia Power (NSPI) is cooperating with the Office of the Privacy Commissioner of Canada (OPC) during a cybersecurity incident investigation and has provided updates to the Nova Scotia Energy Board (NSEB) and government officials. The context is a regulatory inquiry into the incident, referenced as NSEB M12273.

1 • Monday, April 28, 2025 2 • Thursday, May 1, 2025 3 • Wednesday, May 14, 2025 4 • Friday, May 23, 2025 5 • Wednesday, June 4, 2025 6 • Wednesday, June 25, 2025 7 8 Customers can access these public/media updates via a banner on the NS P...

AI summary NS Power communicated cyber incident updates via a homepage banner, social media, and direct emails to stakeholders, including a provincial media distribution list. On June 4, 2025, NS Power executives testified before the Standing Committee on Public Accounts regarding the incident and engaged with media post-session. Proactive notifications were sent to local media about customer support sessions.

REDACTED (CONFIDENTIAL INFORMATION REMOVED) Nova Scotia Energy Board IN THE MATTER OF The Public Utilities Act, R.S.N.S. 1989, c.380, as amended M12273 Board Inquiry into Nova Scotia Power’s Cybersecurity Incident Nova Scotia Power Inciden...

AI summary This document outlines Nova Scotia Power's cybersecurity incident report, submitted under the Public Utilities Act. The inquiry investigates the incident, including affected systems, data breaches, response actions, and customer communications. Key details are redacted due to confidentiality.

the issues raised by the Premier without the need for a 23 new matter. 24 25 On December 10, 2025, the NSEB provided additional direction by letter stemming from a 26 customer complaint (M12457). In its letter, the NSEB noted as follows: 2...

AI summary The NSEB directed NS Power to report on progress related to a customer complaint (M12457) and a cybersecurity incident (M12273). The Board emphasized separate processes for broader reviews and requested updates in the final report. A letter (M12600) and complaint filing are referenced.

unities. 22 NS Power also notified NERC, the Electricity Information Sharing and Analysis Center (E-ISAC), 23 and the Northeast Power Coordinating Council, and provided them with information about the 24 Incident. 25 26 As noted above, NS...

AI summary NS Power reported a cybersecurity incident to multiple organizations, including NERC, E-ISAC, and law enforcement agencies such as RCMP and CSIS, highlighting the severity and critical nature of the attack.

............................................................................. 14 8 4.0 RESPONSE AND RECOVERY ACTIONS ..................................................................... 15 9 4.1 Mitigation and Restoration Actions ...........

AI summary The text outlines sections of a regulatory proceeding document, including response and recovery actions, personal information handling, impact analysis, and recommendations for enhancing security measures. It references a specific direction (M12457) and includes subsections on mitigation, customer communication, stakeholder engagement, and security audits.

EDACTED (CONFIDENTIAL INFORMATION REMOVED) 2025 Nova Scotia Power’s Cybersecurity Incident Report REDACTED 1 1.0 INTRODUCTION 2 3 In its July 14, 2025 letter regarding the cybersecurity incident (Incident) experienced by Nova 4 Scotia Powe...

AI summary Nova Scotia Power Inc. (NSP) is required by the Nova Scotia Energy Board (NSEB) to submit a cybersecurity incident report detailing the 2025 incident, including affected systems, root causes, and response actions. The NSEB also directed NSP to settle vendor dues and engage MNP to investigate data handling practices following a financial technology data compromise.

EDACTED (CONFIDENTIAL INFORMATION REMOVED) 2025 Nova Scotia Power’s Cybersecurity Incident Report REDACTED 1 6.0 IMPACT ANALYSIS 2 3 In its letter of July 14, 2025, the NSEB directed the following be included in the Report regarding 4 the...

AI summary This section of the 2025 Nova Scotia Power Cybersecurity Incident Report discusses the impact analysis of a breach, including financial, operational, and reputational effects. It confirms that no operational technology or energy delivery systems were accessed, and the grid remained uninterrupted. NS Power is committed to restoring customer trust, as noted by Peter Gregg in a public statement.

1 These communications and releases to media occurred on the following dates: 2 3 • Monday, April 28, 2025 4 • Thursday, May 1, 2025 5 • Wednesday, May 14, 2025 6 • Friday, May 23, 2025 7 • Wednesday, June 4, 2025 8 • Wednesday, June 25, 2...

AI summary The document outlines the dates and methods used by NS Power to communicate updates regarding a cyber incident to the public and media. Key communications included appearances before the Standing Committee on Public Accounts and direct engagement with media.

Inquiry into Nova Scotia Power's Cybersecurity Incident (NSEB M12273) NSPI Responses to NSEB Information Requests NON-CONFIDENTIAL

AI summary This document outlines Nova Scotia Power's responses to the Nova Scotia Energy Board's information requests regarding a cybersecurity incident. The inquiry is part of a regulatory proceeding to assess the incident and its implications.

December 1, 2025 Crystal Henwood Clerk of the Board Nova Scotia Energy Board 1601 Lower Water Street, 3rd Floor Halifax, NS B3J 3S3 Re: M12273 – Nova Scotia Power’s Cybersecurity Incident – Monthly Update 4 Dear Ms. Henwood: On July 14, 20...

AI summary The Nova Scotia Energy Board (NSEB) directed Nova Scotia Power (NS Power) to submit monthly updates on its response to a cybersecurity incident. NS Power is on track to deliver its Incident Report by December 31, 2025. The NSEB mandated resolving vendor dues, providing a Gantt chart in the report, and engaging MNP to investigate data handling practices.

ata for the FAM report was able to be created through different processes, with a high degree of confidence that the data is accurate. Once systems are back online, any discrepancies will be trued up. Dispatch Study Action Plan Quarterly U...

AI summary The document discusses updates on the FAM report data accuracy, delays in the ECC Optimization Tools Project until March 2026, resolution of Maritime Link Project cost allocation issues, and the impact of a cybersecurity incident on the Joint-Use Agreement Proceeding. NS Power also addressed capital costs for poles under the JUA.

oint-Use Agreement Proceeding (M12149), June 16, 2025. 6 SBA IR-2, Joint-Use Agreement Proceeding (M12149), June 16, 2025. Page 8 of 9 December 1, 2025 C. Henwood Update on OPC Investigation As noted in previous reports, the Office of the...

AI summary The document updates on an ongoing OPC investigation into a cyber incident, noting Nova Scotia Power's cooperation. It mentions CEO Peter Gregg and Director Chris Lanteigne's testimony before the Standing Committee on Natural Resources and Economic Development, acknowledging customer concerns and commitment to resolution.

otes that customer information was accessed on March 19, 2025, which is more than a month before the date NS Power discovered and responded to the cyber incident as noted in its initial press release. The Board has opened a proceeding and...

AI summary The Board has initiated an inquiry into a cybersecurity incident involving NS Power, where customer data was accessed before the company's public response. The Board will engage cybersecurity experts and require NS Power to submit a report, emphasizing regulatory oversight while allowing NS Power to focus on recovery efforts.

or and response to the event that occurred. The Board believes NS Power should be able to file this incident report by the end Document: 322528 -3- of this year, but if NS Power does not believe this date is achievable, it may propose anot...

AI summary The Board requires NS Power to file an incident report by year-end, with monthly progress updates if the deadline isn't met. MNP will independently assess the incident for the Board. Customer concerns about data misuse and communication issues with credit monitoring services are addressed through Letters of Comment and upcoming information requests.

Matter No. M12273 NOVA SCOTIA ENERGY BOARD IN THE MATTER OF: The Public Utilities Act - and - IN THE MATTER OF: Board inquiry into Nova Scotia Power’s Cybersecurity Incident NOTICE OF INTERVENTION OF: SMALL BUSINESS ADVOCATE TAKE NOTICE th...

AI summary The Small Business Advocate intervenes in a proceeding under the Public Utilities Act regarding Nova Scotia Power’s cybersecurity incident, representing three classes of small businesses. The intervention highlights potential impacts on small business interests and seeks to ensure their concerns are addressed in the regulatory process.

Osler, Hoskin & Harcourt LLP Box 50, 1 First Canadian Place Toronto, Ontario, Canada M5X 1B8 416.362.2111 MAIN 416.862.6666 FACSIMILE August 8, 2025 Adam Kardash Direct Dial: 416.862.4703 [email protected] Our Matter Number: 1268459 Sent...

AI summary NS Power seeks a procedural order and confidentiality for submissions related to a 2025 ransomware attack inquiry. The request emphasizes the sensitive nature of cybersecurity incident details, limiting access to panel members, the Clerk, and Board counsel.

es should reflect the standards of privacy regulators in Canada and internationally. Privacy regulators are Page 3 accustomed to inquiring into cybersecurity incidents in a procedurally fair manner that is sensitive to the unique context w...

AI summary Privacy investigations by regulators are inquisitorial and cooperative, involving the regulator, the subject company, and complainants. The process is non-adversarial, focusing on collaboration rather than contested cases, with confidentiality and public information considerations.

r seeking a determination. Rather, one or more individuals make a complaint to the regulator, and the regulator thereafter initiates a confidential investigative process. b. During the investigation, everything exchanged between the regula...

AI summary The process outlines how complaints are handled by the regulator through a confidential investigation. The regulator publishes a report detailing findings, company responses, and preventive measures, with the company allowed to comment on the draft. Complainants and intervenors are excluded from the inquiry process, with privacy regulations restricting their access to investigative records.

This is further to your public and “Board Confidential” letters sent to the Nova Scotia Energy Board on August 8, 2025. The Board panel considering this matter is Stephen T. McGrath, K.C., Chair, Roland A. Deveau, K.C., Vice Chair, and Ric...

AI summary The Nova Scotia Energy Board investigates a utility's cybersecurity practices following a breach, assessing prudence, infrastructure impact, customer service, and data handling. The Board asserts authority under the Public Utilities Act to examine compliance and determine cost recovery reasonableness.

(and, if not, whether it has incurred or will incur expenses as a result that could be considered to have resulted from imprudence). Document: 323519 -2- Moreover, your client has a broadly stated mandate “to furnish service and facilities...

AI summary The Board raises concerns about NS Power's prudent investment in cybersecurity following a recent incident, questioning the adequacy of its operational technology protections and data handling practices. It challenges the confidentiality terms in the proposed procedural order, emphasizing the 'open courts' principle and referencing past proceedings (Matter M11181).

ower believes it is entitled to unilaterally designate information it may file as “Board Confidential” and expects that this claimed status will be accepted without review or question. • As the regulator, the Board must be able to access a...

AI summary NS Power claims unilateral authority to designate information as 'Board Confidential' without review. The Board counters that it must access internal/external resources, including technical advisors, which NS Power's restrictions would hinder, citing s. 15 of the Energy and Regulatory Boards Act.

• It may be appropriate for NS Power to review some filings in this proceeding for confidentiality, such as evidence filed by the parties (including Board Counsel consultants). The need for this may depend on the nature of the information...

AI summary The Board acknowledges NS Power's role in reviewing filings for confidentiality but emphasizes transparency in proceedings. It requests clarification on procedures related to utility investigations and information security, while balancing the need to protect sensitive data. The Board reaffirms its commitment to public disclosure where possible, despite security constraints.

Osler, Hoskin & Harcourt LLP Box 50, 1 First Canadian Place Toronto, Ontario, Canada M5X 1B8 416.362.2111 MAIN 416.862.6666 FACSIMILE August 20, 2025 Adam Kardash Direct Dial: 416.862.4703 [email protected] Our Matter Number: 1268459 Sent...

AI summary Osler, Hoskin & Harcourt LLP responds to the Nova Scotia Energy Board's inquiry into a cybersecurity incident involving Nova Scotia Power (NS Power), reiterating NS Power's commitment to cooperation while emphasizing the need for confidentiality protections due to the sensitive nature of the information involved.

to physical operations at NS Power’s generation, transmission and distribution facilities, and the Incident has not impacted the Company’s ability to safely or reliably serve customers in Nova Scotia. However, the Incident impacted some bu...

AI summary NS Power's incident affected data center systems but not customer service. A Recovery Program Office was established to restore systems and enhance security. The OPC is investigating, and NS Power is cooperating.

September 17, 2025 Judith Ferguson [email protected] Executive Vice President, Regulatory, Legal and Government Relations Nova Scotia Power Incorporated P.O. Box 910, 1223 Lower Water Street Halifax, Nova Scotia B3J 3S8 Adam Karda...

AI summary Nova Scotia Power Inc. (NSP) submitted its first monthly update on a cybersecurity incident to the Board, following a July 14, 2025 directive. NSP requested an extension for its initial filing due to confidentiality concerns, which the Board granted but required confidentiality-related requests to be submitted by August 15, 2025. The inquiry involves Board members Stephen T. McGrath, Roland A. Deveau, and Richard J. Melanson.

e’s content was underwhelming. It repeated information that generally was already provided in prior correspondence, and in the public domain. The Board would have expected more information about the Recovery Program Office, who is involved...

AI summary The Board criticized the Recovery Program Office's lack of transparency, customer concerns over data misuse, and delayed responses to Information Requests (IRs) related to cybersecurity. The Monthly Update failed to detail cybersecurity impacts on business systems or regulatory matters, with updates shared haphazardly through other filings.

tion that was stolen. However, the Board emphasized [in a letter dated July 14, 2025] that it was important that this proceeding be conducted as publicly and transparently as possible. The “Board Confidential” letter that you sent on Augus...

AI summary The Board criticizes a 'Board Confidential' letter for insufficient transparency, emphasizing regulatory processes must be publicly open. It demands detailed justifications for confidentiality claims, arguing much of the letter's content is non-sensitive and should be publicly disclosed. Submissions are due August 20, 2025, with confidentiality claims requiring full rationale.

ever, NS Power consented to the Board disclosing Appendix B and the Confidential Submission to the Formal Intervenors in this matter, under the Board’s normal process for confidentiality undertakings. As the Board has previously stated in...

AI summary NS Power agreed to the Board disclosing Appendix B and a Confidential Submission to formal intervenors. The Board clarified it is an economic regulator, not a privacy authority, and emphasized its 'open courts' principle. It noted it typically does not require confidentiality undertakings for external advisors like MNP Digital, though such advisors generally maintain confidentiality.

eporting. The RPO includes representation and input from various business units, consisting of approximately 30 personnel between employees and consultants. The RPO is focused on the following areas: • Program Delivery Governance – Integra...

AI summary The Regulatory Program Office (RPO) oversees program governance, regulatory compliance, resourcing, and cybersecurity across Nova Scotia Power's initiatives. It includes 30 personnel and external advisors, focusing on areas like risk management, internal controls, and organizational change. Ongoing regulatory matters, particularly rates-related issues, are impacted by these operations.

online. However, please see Attachment 1 for the requested data for 2024 (for the peak hour) and the requested data for 2030 and 2035 pulled from the NS-NB Reliability Intertie model.8 Relatedly, as referenced above under NS-NB Reliability...

AI summary The document discusses challenges in retrieving historical PLEXOS models due to a cybersecurity incident, with NS Power temporarily recreating models for planning. It also highlights NSPML's inability to detail cost allocations between the Maritime Link Project and sustaining capital due to IT system outages, prompting NSEB to request IT service restoration.

hat this disruption has had an impact on many vendors and suppliers, and it has put several measures in place to return to normal invoice payment processes and timelines. November 3, 2025 C. Henwood The IT and Finance teams have been worki...

AI summary NS Power reports a cybersecurity incident disrupting invoice payments and regulatory processes, with efforts underway to restore systems and notify affected customers. The incident has impacted ongoing regulatory matters, including rates-related proceedings, with updates provided in NSEB M12273.

s investigation into the incident remains ongoing. Monthly Update # 3 also stated that NS Power remains on schedule to provide the Incident Report to the Board on or before December 31, 2025. There is still uncertainty about what tasks and...

AI summary The Board highlights ongoing delays in NS Power's incident report submission, lack of progress on recovery efforts (e.g., manual meter reading), and concerns over unpaid vendor invoices. It directs NS Power to resolve outstanding payments and provide detailed financial updates, while referring the cybersecurity incident to MNP for investigation.

access to GIS, NS Power has not been able to fully execute or review the new process, and therefore, a formal agreement with Bell has not yet been finalized or signed.6 While some of the GIS services have been restored, the integrations req...

AI summary NS Power has not finalized a formal agreement with Bell due to ongoing GIS service restoration delays, with integrations expected by Q1 2026. The NSEB is handling the open proceeding, while NS Power continues recovery efforts for critical systems. The OPC investigation is also referenced.

ity, implement policies and practices to give effect to privacy protections, and prevent unauthorized access, disclosure, copying, harvesting, use, or modification of personal information. 50. NSP failed to comply with these non-optional s...

AI summary NSP is accused of failing to protect customer data under PIPEDA and the Public Utilities Act, leading to a breach and claims of negligence. The Plaintiff alleges unjust enrichment from overcharging customers and unconscionable conduct due to NSP's monopoly power and exploitation of consumer vulnerabilities.

January 28, 2026 Jamie MacGillivray, CEO [email protected] Via NSEB Web Portal MacGillivray Law - New Glasgow 134 Provost Street PO Box 753 New Glasgow, NS B2H 2P7 Crystal Henwood Ph: 902-755-0398 Fax: 902-755-2813 Regulatory Af...

AI summary The letter withdraws Danielle Fraser's intervention in M12273, citing jurisdictional limits of the Nova Scotia Energy Board regarding NSP's cybersecurity breach. The client argues the matter requires judicial remedies beyond regulatory proceedings, emphasizing concerns outside the Board's mandate.

t’s concerns require judicial determination and cannot be adequately addressed through this Board proceeding, regardless of the thoroughness of the Board's regulatory review. CONSUMER ADVOCATE'S ROLE After hearing from the Consumer Advocat...

AI summary The entity withdraws from the Board proceeding, emphasizing that judicial remedies for customer claims are outside the Board's jurisdiction. It highlights the complementary roles of regulatory oversight and judicial proceedings, noting NSP's objection to client participation in the regulatory process. The Consumer Advocate's role in representing consumer interests is acknowledged.

are not matters that this Board can adjudicate, and we agree with the objection of NSP that participation in this regulatory proceeding is neither necessary nor appropriate for pursuing those claims. We thank the Board for its consideratio...

AI summary The text states that certain claims are outside the Board's jurisdiction, aligning with NSP's objection to their adjudication. It acknowledges the Board's consideration of Ms. Fraser's intervention request and expresses anticipation for the inquiry's outcome.

PO Box 910 Halifax, Nova Scotia Canada B3J 2W5 February 5, 2026 Crystal Henwood Clerk of the Board Nova Scotia Energy Board 1601 Lower Water Street, 3rd Floor Halifax, NS B3J 3S3 Re: M12273 – Nova Scotia Power’s Cybersecurity Incident – Mo...

AI summary Nova Scotia Power (NS Power) submitted its fifth monthly update to the Nova Scotia Energy Board (NSEB) regarding its response to a 2025 cybersecurity incident. The report includes an updated Gantt chart and table for tracking regulatory matters, with plans to provide future updates. The Incident Report was filed in December 2025.

February 6, 2026 By Email M12273 Parties Dear Parties: M12273 – Board Inquiry into Nova Scotia Power’s Cybersecurity Incident and M12600 – Minister of Energy – Accountability for Nova Scotia Power

AI summary The Board is conducting an inquiry into Nova Scotia Power’s cybersecurity incident (M12273) and the Minister of Energy’s accountability (M12600). The email notifies parties of these proceedings, highlighting concerns over cybersecurity risks and regulatory oversight.

ebruary 6, 2026 By Email M12273 Parties Dear Parties: M12273 – Board Inquiry into Nova Scotia Power’s Cybersecurity Incident and M12600 – Minister of Energy – Accountability for Nova Scotia Power

AI summary The email references two matters: M12273, a Board Inquiry into Nova Scotia Power’s cybersecurity incident, and M12600, concerning the Minister of Energy’s accountability. It notifies parties of these proceedings and their associated regulatory focus areas.

This letter outlines the processes the Nova Scotia Energy Board intends to follow for Matter M12273 – Board Inquiry into Nova Scotia Power’s Cybersecurity Incident and Matter M12600 – Minister of Energy – Accountability for Nova Scotia Pow...

AI summary The Nova Scotia Energy Board outlines its approach to two matters: M12273 (cybersecurity incident inquiry) and M12600 (accountability for Nova Scotia Power). The Board proposes separating technical cybersecurity issues from customer relations, billing practices, and regulatory impacts, arguing this minimizes duplication. NS Power asserts prior reports addressed the Premier’s concerns, but the Board maintains a dual-inquiry approach.

the proceedings. A preliminary scoping of the issues to be addressed in each proceeding is set out below. M12273 – Board Inquiry into Nova Scotia Power’s Cybersecurity Incident This proceeding will review technical aspects of the cybersecu...

AI summary The document outlines two regulatory proceedings: M12273, reviewing Nova Scotia Power's (NS Power) cybersecurity incident response and measures, and M12600, examining NS Power's accountability for customer data handling, billing accuracy, and communication post-incident. Both proceedings assess the reasonableness of NS Power's actions.

to Matter M12600, so that information included in them that is within the scope of that proceeding is included in the matter. Intervenors Intervenors in Matter M12273 will be deemed to be intervenors in Matter M12600 without the need to fi...

AI summary The document outlines procedural steps for Matters M12273 and M12600, including automatic intervenor status, MNP Digital's role in reviewing a cybersecurity incident, and NS Power's obligation to file monthly updates. A hearing is scheduled for mid- to late-summer 2025.

filed on October 15, 2025. On March 19, 2026, the NSEB issued its decision in the JUA Proceeding. The decision requires NS Power to file any executed Joint Use Agreement with Bell, notify the Board within 14 days if the Letter of Intent is...

AI summary The NSEB mandated NS Power to file executed Joint Use Agreements with Bell, notify the Board of termination or changes, and submit follow-up reports on implementation and cost impacts. Non-compliance by June 30, 2026, may trigger further Board action.

y continued to mature under formal governance. Several foundational components have progressed through readiness milestones, while others remain subject to staged validation and dependency resolution. The recovery strategy in this area emp...

AI summary The text outlines ongoing recovery efforts emphasizing governance, cybersecurity, and alignment with enterprise standards. Cybersecurity recovery focuses on validation and structured processes, while formal oversight ensures stable operations. The resolution of an investigation by the Office of the Privacy Commissioner of Canada is noted as a key matter.

Resolution of the Investigation of the Office of the Privacy Commissioner of Canada As indicated in Monthly Update 8, the Office of the Privacy Commissioner of Canada (OPC) has announced that it would discontinue its investigation of the c...

AI summary The Office of the Privacy Commissioner of Canada (OPC) has paused its investigation into NS Power's cyberattack response pending NS Power's fulfillment of commitments outlined in a Compliance Letter. NS Power reports ongoing efforts to meet these obligations and maintain OPC updates.

The following projects experienced adjustments to their completion timeline. An overview of the changes and associated rationale is outlined below: Pillar Project Summary of Change Rationale Affected Regulatory Matters Report 2 - October 1...

AI summary The document outlines changes to the completion timelines of various regulatory matters, with reports scheduled from October 1 to June 11, 2026, and a forecast for the restoration of normal activities updated on June 11, 2026.

The following projects experienced adjustments to their completion timeline. An overview of the changes and associated rationale is outlined below: Pillar Project Summary of Change Rationale Joint Use Agreement Proceeding Introduced NA Upd...

AI summary The document outlines adjustments to the completion timelines of various projects, including the Joint Use Agreement Proceeding and Customer Energy Management (CEM) Evaluation, Measurement, and Verification (EM&V), along with the rationale for these changes. The timeline updates are presented in a table format, showing changes across different time intervals and hold reasons.