Nova Scotians' personal information stolen in global security breach: province
The Nova Scotia government says it is investigating the theft of personal information stolen through a global privacy breach to a third-party file transfer system the province was using.
The province has yet to determine what information may have been taken or how many Nova Scotians could be affected by the breach to software company MoveIt's products, Cyber Security and Digital Solutions Minister Colton LeBlanc said in a Sunday news conference.
"At this time, staff are manually going through all of the files that were accessed to identify what information was stolen and who it belongs to," he said.
"Until all of this work is complete, we aren't able to say how many Nova Scotians have been impacted."
The MoveIt software made by Burlington, Massachusetts-based company Ipswitch allows organizations to transfer files and data between employees, departments and customers.
Progress Software, the parent company of Ipswitch, confirmed a vulnerability in its software last week, saying the issue could lead to potential unauthorized access of users' systems and files.
But the company notified the province of a critical vulnerability within its system on Thursday, LeBlanc said.
The province then took the service offline and installed a security update before bringing it back online Friday, only to be told further investigation was needed. Cyber security experts were then called in.
On Saturday evening.
LeBlanc said the investigation gave the province "a high degree of confidence that yes, there has been a breach of personal information."
"We did not want to wait for all the answers before we told Nova Scotia what we are dealing with," he said.
"I know there are questions we can't answer right now because we're still analyzing the full extent."
LeBlanc would not say which departments had been using MoveIt or whether he was aware of other provinces or territories affected by the breach.
He said the province has informed Tricia Ralph, Nova Scotia's information and privacy commissioner, of the breach and intends to create a website offering the public more information on the situation.
He also promised the province will directly notify Nova Scotians who have been impacted.
"I know that this is a stressful time for many Nova Scotians right now and I want to reassure all Nova Scotians that we are working tirelessly to resolve this issue as quickly and as efficiently as possible," LeBlanc said.
Progress Software did not answer questions about how many Canadians may be affected and what other governments or businesses in the country have used its products.
But it said it promptly launched an investigation after discovering a vulnerbility, alerted customers, provided immediate mitigation steps and developed a security patch within 48 hours.
"We are also continuing to work with industry-leading cybersecurity experts to investigate the issue and ensure we take all appropriate response measures," the company said in an email.
This report by The Canadian Press was first published June 4, 2023.
For more Nova Scotia news visit our dedicated provincial page.
CTVNews.ca Top Stories
Trudeau acknowledges charges in Nijjar killing, calls for commitment to democracy
Prime Minister Justin Trudeau has acknowledged the charges laid Friday in relation to the murder of B.C. Sikh activist Hardeep Singh Nijjar.
No proof man lied to brother about number of kittens born in litter, B.C. tribunal rules
A man was denied a $5,000 payout from his brother after a B.C. tribunal dismissed his claim disputing how many kittens were born in a litter.
Bodies recovered in Mexico likely 2 Australians, 1 American who went missing: officials
Three bodies recovered in an area of Baja California are likely to be those of the two Australians and an American who went missing last weekend during a camping and surfing trip, the state prosecutor’s office said Saturday.
Princess Anne lays wreath at B.C. veteran's cemetery; receives 21-gun salute
Princess Anne paid tribute to veterans buried at a cemetery in British Columbia today, laying a wreath to honour the more than 2,500 military personnel and family members buried there.
Mystik Dan wins the 150th Kentucky Derby at Churchill Downs in a three-horse photo finish
Mystik Dan won the 150th Kentucky Derby in a photo finish, edging out Forever Young and Sierra Leone for the upset victory.
'I just can't believe that it took so long': Body found in wreckage 3 months after deadly fire
A man accused of arson in a January Old Strathcona apartment fire is expected to be charged with manslaughter after a body was discovered in the burned building late last month.
Quebec police hand out hundreds of tickets to Hells Angels and other bikers before 'first run' meeting
Quebec provincial police handed out hundreds of fines to Hells Angels members and other supporting motorcycle clubs who met for their 'first run' in a small town near Sherbrooke, Que.
Work stoppage possible as WestJet issues lockout notice to maintenance engineers' union
A lockout notice issued by WestJet to a union representing aircraft maintenance engineers could result in a work stoppage next week.
London Drugs begins 'gradual reopening' on 7th day after cyberattack
Almost a week after all London Drugs stores across Western Canada abruptly closed amid a cyberattack, they began a "gradual reopening" on Saturday.