Nova Scotians' personal information stolen in global security breach: province
The Nova Scotia government says it is investigating the theft of personal information stolen through a global privacy breach to a third-party file transfer system the province was using.
The province has yet to determine what information may have been taken or how many Nova Scotians could be affected by the breach to software company MoveIt's products, Cyber Security and Digital Solutions Minister Colton LeBlanc said in a Sunday news conference.
"At this time, staff are manually going through all of the files that were accessed to identify what information was stolen and who it belongs to," he said.
"Until all of this work is complete, we aren't able to say how many Nova Scotians have been impacted."
The MoveIt software made by Burlington, Massachusetts-based company Ipswitch allows organizations to transfer files and data between employees, departments and customers.
Progress Software, the parent company of Ipswitch, confirmed a vulnerability in its software last week, saying the issue could lead to potential unauthorized access of users' systems and files.
But the company notified the province of a critical vulnerability within its system on Thursday, LeBlanc said.
The province then took the service offline and installed a security update before bringing it back online Friday, only to be told further investigation was needed. Cyber security experts were then called in.
On Saturday evening.
LeBlanc said the investigation gave the province "a high degree of confidence that yes, there has been a breach of personal information."
"We did not want to wait for all the answers before we told Nova Scotia what we are dealing with," he said.
"I know there are questions we can't answer right now because we're still analyzing the full extent."
LeBlanc would not say which departments had been using MoveIt or whether he was aware of other provinces or territories affected by the breach.
He said the province has informed Tricia Ralph, Nova Scotia's information and privacy commissioner, of the breach and intends to create a website offering the public more information on the situation.
He also promised the province will directly notify Nova Scotians who have been impacted.
"I know that this is a stressful time for many Nova Scotians right now and I want to reassure all Nova Scotians that we are working tirelessly to resolve this issue as quickly and as efficiently as possible," LeBlanc said.
Progress Software did not answer questions about how many Canadians may be affected and what other governments or businesses in the country have used its products.
But it said it promptly launched an investigation after discovering a vulnerbility, alerted customers, provided immediate mitigation steps and developed a security patch within 48 hours.
"We are also continuing to work with industry-leading cybersecurity experts to investigate the issue and ensure we take all appropriate response measures," the company said in an email.
This report by The Canadian Press was first published June 4, 2023.
For more Nova Scotia news visit our dedicated provincial page.
CTVNews.ca Top Stories
NDP motion regarding Palestinian statehood passes after major Liberal alterations
A motion from the federal New Democrats initially calling on Canada to recognize the 'State of Palestine' passed amid widespread acrimony on Monday, after the Liberals drastically altered its wording to see the government simply work towards that aim as part of a two-state solution.
'He didn't want to die': Family of Calgary man killed in standoff speaks out
Family of a Calgary man killed after a 30-hour standoff with police last week are speaking out, sharing details of the tense and heart-wrenching experience.
Toronto family doctor who called patient's body 'perfect' suspended for 3 months: tribunal
A family doctor in Toronto has been suspended for three months after a disciplinary tribunal found that he failed to follow proper protocols while examining a patient's breasts and made inappropriate comments about her body.
Ohio mom who left toddler alone 10 days when she went on vacation pleads guilty to aggravated murder
An Ohio mother whose 16-month-old daughter died after being left home alone in a playpen for 10 days last summer while she went on vacation was sentenced Monday to life in prison with no chance of parole.
Retired teacher pleads guilty to paying for sex with 15-year-old in Collingwood, Ont.
In a Barrie courtroom on Monday, a retired high school teacher from the Niagara Region pleaded guilty to sexual touching and obtaining sexual services from a 15-year-old boy in Collingwood in 2021.
Hertz CEO out following electric car 'horror show'
The company, which announced in January it was selling 20,000 of the electric vehicles in its fleet, or about a third of the EVs it owned, is now replacing the CEO who helped build up that fleet, giving it the company’s fifth boss in just four years.
5 charged in Calgary kidnappings that targeted women
Calgary police have charged five men in a pair of kidnappings last year that targeted innocent victims.
Demand soars for solar eclipse glasses in Canada. Are they worth buying?
The demand for total solar eclipse glasses used to safely view the rare celestial event has been ramping up as sellers, along with astronomy and eye-care experts in Canada, warn that viewing the eclipse with the naked eye is dangerous.
Canadian commander of volunteer fighter group dies in Ukraine
A Canadian-born commander of the so-called Norman Brigade, a volunteer fighting group in Ukraine, has died.