Government failings exacerbated 2023 breach, says N.S. privacy commissioner
Nova Scotia's information and privacy commissioner says the provincial government did not have reasonable security and information practices in place before a massive security breach in 2023 involving a file transfer service.
Tricia Ralph released her investigation report into the MOVEit privacy breach on Wednesday, finding that the province's protocols before the breach exacerbated the impact of the cybersecurity attack, and some of its actions afterward increased stress for the victims.
"We, as citizens, must demand more of the public institutions that collect personal information about us," Ralph said in a news release about her report. "Real leadership at the highest level in the Nova Scotia government is needed to ensure that adequate security and information practices, which are required by law, are implemented."
The breach came to light in June 2023 and the Nova Scotia government held a rare Sunday afternoon news conference to alert the public of a "global cybersecurity issue" that resulted in the theft of personal information.
The cybersecurity attack was part of a huge global breach involving MOVEit, a file transfer service used by the public and private sector to share personal information. The breach affected an estimated 18.5 million people worldwide.
100,000 Nova Scotians affected
At the time, Colton LeBlanc, the minister responsible for cybersecurity and digital solutions, told reporters the government didn't know how many Nova Scotians were affected or what information was stolen.
In the following days, it became clear that about 100,000 Nova Scotians were affected, including current or past employees of Nova Scotia Health, the IWK and the provincial civil service. The stolen information included banking details, home addresses and social insurance numbers.
Later, additional affected groups were identified by the government, including newborns, students, people who received parking tickets, and teachers, among many others.
Nova Scotia's information and privacy commissioner launched her investigation into the breach that December.
Report findings
Ralph's report says basic practices — such as completing a privacy impact assessment, a tool that identifies risks of a system — were not implemented and the government was therefore not in compliance with the Freedom of Information and Protection of Privacy Act or the Personal Health Information Act.
The government did not tell users of the MOVEit system how long they should keep files in it, the report says, and MOVEit ended up being used as a "repository for extraneous records." The retention of those unnecessary records in the system made the extent of the breach significantly worse, Ralph's report says.
Ralph found that in the wake of the breach, some of the province's actions were reasonable, such as notifying affected people quickly and offering credit monitoring for five years.
But she said the notification letters to breach victims did not have enough information, adding to their stress and worry. The government's contact information for victims was also outdated, so many did not even receive notification and could not take steps to protect themselves.
The Office of the Information and Privacy Commissioner received 110 complaints from Nova Scotians about the breach.
Commissioner's recommendations
Ralph issued eight recommendations in her report, including that the government specify the maximum time that files can remain in the MOVEit system, that it monitor the use of MOVEit at least yearly, and that it make public the appropriate portions of its privacy impact assessment on MOVEit.
Ralph also recommended that the government consult with the Office of the Information and Privacy Commissioner before issuing any future privacy breach notification letters, and make every effort to update the contact information the government holds on residents.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
CTV News
18 hours ago
- CTV News
‘Absolutely unimaginable': N.S woman says she was falsely diagnosed with cancer
Gabriella Patey says she and her family are traumatized after she was falsely diagnosed with cancer by a Halifax hospital. The 31-year-old claims it all started on May 17, when she says she had just finished celebrating after her doctor informed her that results from the IWK, a women's health centre, showed a tumour in her breast was 'completely benign.' 'We celebrated as my mother had just died of the same cancer a year-and-a-half prior. So, it was a huge relief,' says Patey. But the celebration was short-lived, as Patey says she received a shocking call from her doctor less than a month later. 'I get a call from my primary care physician that the IWK had made a mistake, and I actually did have metastatic carcinoma, which is a very grim diagnosis,' says Patey. Just as quickly as she got that call, Patey says she went into 'survival mode' and began making calls of her own. 'I told my friends, my family, my work,' says Patey. 'I put claims in through my bank so my bills would be taken care of. And I got my primary physician that put my name on the list for medically assisted dying. 'My number one priority was to make sure my husband was taken care of. And making sure he didn't have to watch me suffer, like I had to watch my mother suffer,' she says. But things took a turn when Patey says she received another phone call from her doctor last Friday. She says her doctor informed her there had been a mix up at the IWK and that she did not have cancer. Patey says she received a second opinion on Monday, with her doctor confirming she was indeed cancer free. 'This morning, I received a phone call from my primary care physician, the director of pathology at the IWK did a full investigation. She actually went and looked through all the slides and all the reporting herself and determined that my file had been mixed up with someone else's. So now my thought is (that) there's this poor woman that's walking around that was given hope that she didn't have breast cancer. And she does. And she has one of the most aggressive breast cancer out there,' says Patey. Andrea Slaney, a spokesperson for the IWK, told CTV News Atlantic in an email Monday that, 'due to patient privacy, IWK Health is unable to comment on specific cases. However, concerns of this nature are taken seriously and a formal investigation process is followed with engagement from IWK's Quality, Patient Safety and Patient Experience team.' Patey says she does not know what to believe and her faith in the province's health-care system is lost. 'We haven't been able to sleep. We've been crying ourselves to sleep every night. And now I have to go to my work, my family, and say, 'Actually, I don't have this terminal diagnosis.'' And the shame that I feel for having to do that, even though it's not my fault,' says Patey. 'Our health-care system is broken. We know that it's been broken for some time, but it seems like if something like this can happen, are we broken beyond repair?' Patey says throughout this process, she was never once contacted by the IWK directly. She says she intends on taking legal action. 'I'm a person, I'm a human being. I'm not a number in a computer system and to not even call and say, 'We are so sorry for what has happened here.' It's just absolutely unimaginable to me,' says Patey. Gabriella Patey Gabriella Patey says she was falsely diagnosed with cancer. (Source: Vanessa Wright/CTV News Atlantic) For more Nova Scotia news, visit our dedicated provincial page
National Observer
a day ago
- National Observer
Nova Scotia's ambitious 'Wind West' offshore energy plan gets support with conditions
Two leading environmental groups are giving a thumbs up to Nova Scotia's ambitious plan to dramatically expand its fledgling offshore wind energy industry. But both groups were quick to add caveats. On Monday, Premier Tim Houston said the province's plan to license enough offshore wind farms to produce five gigawatts of electricity would be increased eightfold to 40 gigawatts, well beyond the 2.4 gigawatts Nova Scotia needs. He called on Ottawa to help cover the costs of his new Wind West project, saying the excess electricity could be used to supply 27 per cent of Canada's total demand. "Nova Scotia is on the edge of a clean energy breakthrough," the Progressive Conservative premier said in an online video, adding the province is poised to become an "energy superpower." Gretchen Fitzgerald, executive director of Sierra Club Canada, said the premier's bold plan, which includes building transmission lines across the country, represents an exciting opportunity for the province. "It could be a game-changer for the region and for Canada," she said in an interview from Ottawa. "But it needs to be done correctly and with consultations." Fitzgerald said the Nova Scotia and Canadian governments must focus on securing long-term benefits from the nascent offshore wind industry because they did a poor job on that front when dealing with the offshore oil and gas sector. "We have to make sure that we are not selling out what is a massive resource for less benefit than communities should have," Fitzgerald said, adding that Nova Scotia continues to suffer from a high rate of energy poverty. In May of this year, utility affordability expert Roger Colton produced a report showing that 43 per cent of Nova Scotians were struggling to pay their energy bills — the highest proportion in Canada. While Fitzgerald applauded Houston's clean energy plan, she criticized what she described as the premier's populist penchant for taking decisive action before consulting with experts and the public. "Moving from a couple hundred turbines to thousands in the next decade needs to be done in a staged way so we learn how to do this right," she said, adding Houston appears to have adopted a "'move-fast-and-break-things mentality." "(That) can lead to unacceptable harm to sensitive ocean life," she said. "From a community benefits and acceptance point of view, breaking trust can be the biggest barrier to getting to good climate solutions." In October 2023, the Public Policy Forum released a study saying Sable Island Bank, an ocean area about 180 kilometres south of Nova Scotia, is among the world's best locations for wind energy generation. "It and several other similarly endowed areas off the coast of Atlantic Canada hold the potential to place the region among the leading global hubs of offshore wind-powered energy development," says the report from the independent non-profit think tank. It goes on to say that as the world shifts from a dependence on fossil fuels to forms of energy that do not emit climate-changing greenhouse gases, Atlantic Canada is facing "a once-in-a-lifetime opportunity ... to recover an economic vitality comparable to the Age of Sail — fittingly built again on the power of wind at sea." The report says the installation of 15 gigawatts of offshore wind generation would create about 30,000 direct jobs annually. Despite the hype, the industry must also earn acceptance from Nova Scotia's fishing industry, which in 2023 contributed $2.5 billion to the province's economy and employed 19,000 people. In Halifax, a spokesman for the Ecology Action Centre called on the provincial government to build public trust, especially with coastal communities. "There really needs to be a priority on stakeholder engagement for all ocean users," said senior energy co-ordinator Thomas Arnason McNeil. "We're going to need to prioritize ecological safeguards and preserve the existing livelihoods that we have. That includes the fishing industry. That's half the economy in Nova Scotia." Still, he said the province's big push for clean energy is on the right track, especially when it comes to building out its electricity grid to better connect with the rest of the country. If done right, the payoff would be enormous, Arnason McNeil said. "We're talking serious job creation here and a lot of revenue potentially," he said. "The bottom line is that you have to do this right. (But) the prize at the end of the road is monumental in terms of the benefits." A call for bids to build enough offshore turbines to generate five gigawatts of electricity is expected as early as this year. This report by The Canadian Press was first published June 8, 2025.
Global News
2 days ago
- Global News
Nova Scotia's ambitious ‘Wind West' offshore energy plan wins support with conditions
Two leading environmental groups are giving a thumbs up to Nova Scotia's ambitious plan to dramatically expand its fledgling offshore wind energy industry. But both groups were quick to add caveats. On Monday, Premier Tim Houston said the province's plan to license enough offshore wind farms to produce five megawatts of electricity would be increased eightfold to 40 megawatts, well beyond the 2.4 megawatts Nova Scotia needs. He called on Ottawa to help cover the costs of his new Wind West project, saying the excess electricity could be used to supply 27 per cent of Canada's total demand. 'Nova Scotia is on the edge of a clean energy breakthrough,' the Progressive Conservative premier said in an online video, adding the province is poised to become an 'energy superpower.' Gretchen Fitzgerald, executive director of Sierra Club Canada, said the premier's bold plan, which includes building transmission lines across the country, represents an exciting opportunity for the province. Story continues below advertisement 'It could be a game-changer for the region and for Canada,' she said in an interview from Ottawa. 'But it needs to be done correctly and with consultations.' Fitzgerald said the Nova Scotia and Canadian governments must focus on securing long-term benefits from the nascent offshore wind industry because they did a poor job on that front when dealing with the offshore oil and gas sector. 'We have to make sure that we are not selling out what is a massive resource for less benefit than communities should have,' Fitzgerald said, adding that Nova Scotia continues to suffer from a high rate of energy poverty. In May of this year, utility affordability expert Roger Colton produced a report showing that 43 per cent of Nova Scotians were struggling to pay their energy bills — the highest proportion in Canada. Get daily National news Get the day's top news, political, economic, and current affairs headlines, delivered to your inbox once a day. Sign up for daily National newsletter Sign Up By providing your email address, you have read and agree to Global News' Terms and Conditions and Privacy Policy While Fitzgerald applauded Houston's clean energy plan, she criticized what she described as the premier's populist penchant for taking decisive action before consulting with experts and the public. 'Moving from a couple hundred turbines to thousands in the next decade needs to be done in a staged way so we learn how to do this right,' she said, adding Houston appears to have adopted a ''move-fast-and-break-things mentality.' '(That) can lead to unacceptable harm to sensitive ocean life,' she said. 'From a community benefits and acceptance point of view, breaking trust can be the biggest barrier to getting to good climate solutions.' Story continues below advertisement In October 2023, the Public Policy Forum released a study saying Sable Island Bank, an ocean area about 180 kilometres south of Nova Scotia, is among the world's best locations for wind energy generation. 'It and several other similarly endowed areas off the coast of Atlantic Canada hold the potential to place the region among the leading global hubs of offshore wind-powered energy development,' says the report from the independent non-profit think tank. It goes on to say that as the world shifts from a dependence on fossil fuels to forms of energy that do not emit climate-changing greenhouse gases, Atlantic Canada is facing 'a once-in-a-lifetime opportunity … to recover an economic vitality comparable to the Age of Sail — fittingly built again on the power of wind at sea.' The report says the installation of 15 gigawatts of offshore wind generation would create about 30,000 direct jobs annually. Despite the hype, the industry must also earn acceptance from Nova Scotia's fishing industry, which in 2023 contributed $2.5 billion to the province's economy and employed 19,000 people. In Halifax, a spokesman for the Ecology Action Centre called on the provincial government to build public trust, especially with coastal communities. 'There really needs to be a priority on stakeholder engagement for all ocean users,' said senior energy co-ordinator Thomas Arnason McNeil. Story continues below advertisement 'We're going to need to prioritize ecological safeguards and preserve the existing livelihoods that we have. That includes the fishing industry. That's half the economy in Nova Scotia.' Still, he said the province's big push for clean energy is on the right track, especially when it comes to building out its electricity grid to better connect with the rest of the country. If done right, the payoff would be enormous, Arnason McNeil said. 'We're talking serious job creation here and a lot of revenue potentially,' he said. 'The bottom line is that you have to do this right. (But) the prize at the end of the road is monumental in terms of the benefits.' A call for bids to build enough offshore turbines to generate five gigawatts of electricity is expected as early as this year.
