Nova Scotians' personal information stolen in global security breach: province
The Nova Scotia government says it is investigating the theft of personal information stolen through a global privacy breach to a third-party file transfer system the province was using.
The province has yet to determine what information may have been taken or how many Nova Scotians could be affected by the breach to software company MoveIt's products, Cyber Security and Digital Solutions Minister Colton LeBlanc said in a Sunday news conference.
"At this time, staff are manually going through all of the files that were accessed to identify what information was stolen and who it belongs to," he said.
"Until all of this work is complete, we aren't able to say how many Nova Scotians have been impacted."
The MoveIt software made by Burlington, Massachusetts-based company Ipswitch allows organizations to transfer files and data between employees, departments and customers.
Progress Software, the parent company of Ipswitch, confirmed a vulnerability in its software last week, saying the issue could lead to potential unauthorized access of users' systems and files.
But the company notified the province of a critical vulnerability within its system on Thursday, LeBlanc said.
The province then took the service offline and installed a security update before bringing it back online Friday, only to be told further investigation was needed. Cyber security experts were then called in.
On Saturday evening.
LeBlanc said the investigation gave the province "a high degree of confidence that yes, there has been a breach of personal information."
"We did not want to wait for all the answers before we told Nova Scotia what we are dealing with," he said.
"I know there are questions we can't answer right now because we're still analyzing the full extent."
LeBlanc would not say which departments had been using MoveIt or whether he was aware of other provinces or territories affected by the breach.
He said the province has informed Tricia Ralph, Nova Scotia's information and privacy commissioner, of the breach and intends to create a website offering the public more information on the situation.
He also promised the province will directly notify Nova Scotians who have been impacted.
"I know that this is a stressful time for many Nova Scotians right now and I want to reassure all Nova Scotians that we are working tirelessly to resolve this issue as quickly and as efficiently as possible," LeBlanc said.
Progress Software did not answer questions about how many Canadians may be affected and what other governments or businesses in the country have used its products.
But it said it promptly launched an investigation after discovering a vulnerbility, alerted customers, provided immediate mitigation steps and developed a security patch within 48 hours.
"We are also continuing to work with industry-leading cybersecurity experts to investigate the issue and ensure we take all appropriate response measures," the company said in an email.
This report by The Canadian Press was first published June 4, 2023.
For more Nova Scotia news visit our dedicated provincial page.
CTVNews.ca Top Stories
NEW What Canada is doing about the toxic forever chemicals in drinking water
As the United States sets its first national limits on toxic forever chemicals in drinking water, researchers say Canada is lagging when it comes to regulations.
Arrest made, manslaughter charge pending in 2022 death of Calgary toddler
Calgary police have arrested a man and a charge is pending in connection with the death of a toddler in 2022.
Prince William returns to public duties after wife Kate's cancer revelation
Prince William will return to public duties on Thursday for the first time since his wife Kate revealed she was undergoing preventative chemotherapy for cancer.
'A living nightmare': Winnipeg woman sentenced following campaign of harassment against man after online date
A Winnipeg woman was sentenced to house arrest after a single date with a man she met online culminated in her harassing him for years, and spurred false allegations which resulted in the innocent man being arrested three times.
Where did the gold go? Crime expert weighs in on unfolding Pearson Airport heist investigation
Almost 7,000 bars of pure gold were stolen from Pearson International Airport exactly one year ago during an elaborate heist, but so far only a tiny fraction of that stolen loot has been found.
Why drivers in Eastern Canada could see big gas price spikes, and other Canadians won't
Drivers in Eastern Canada face a big increase in gas prices because of various factors, especially the higher cost of the summer blend, industry analysts say.
'They needed people inside Air Canada:' Police announce arrests in Pearson gold heist
Police say one former and one current employee of Air Canada are among the nine suspects that are facing charges in connection with the gold heist at Pearson International Airport last year.
House admonishes ArriveCan contractor in rare parliamentary show of power
MPs enacted an extraordinary, rarely used parliamentary power on Wednesday, summonsing an ArriveCan contractor to appear before the House of Commons where he was admonished publicly and forced to provide answers to the questions MPs said he'd previously evaded.
Here's why experts don't think cloud seeding played a role in Dubai's downpour
Scientists say it's highly unlikely cloud seeding is responsible for the heavy rains that have caused flooding in the United Arab Emirates this month, and that climate change is the more likely culprit.