Beware scammers trying to cash in on Nova Scotia Power cyber attack: RCMP

The RCMP are warning Nova Scotia Power customers to be especially wary of scammers in the wake of the ransomware attack on the company.

The utility, which has issued its own warning, announced the security breach in late April and confirmed last week it was the victim of a ransomware attack affecting about 280,000 customers in the province. Letters to affected customers started rolling out last week and the company said it is working with experts to restore its systems and improve security.

"Because it's already in the public consciousness, it's already something people know about. So it's a lot easier to sell that lie that you are with Nova Scotia Power and have somebody's information when you don't have it," Cpl. Mitch Thompson of the RCMP's commercial crime unit told CBC News.

One of the most obvious things to watch out for, Thompson said, is a phone call in which the caller makes urgent demands.

"There is going to be some kind of attempt to get money or information from you, there is going to be some kind of emergency that needs to be dealt with and there is going to be a time limit on that," he said.

Nova Scotia Power has posted a scam alert on its website, warning that there has been an increase in instances of fraudsters using phone calls, text messages, social media posts and websites to pose as the company since the recent cyber attack.

"We encourage you to remain vigilant and cautious about any unsolicited communications that appear to be from Nova Scotia Power asking you to provide your personal information," says the warning. "If you are unsure about the legitimacy of any communications from our team, please confirm the contact information for our Customer Care Centre here."

The cyber breach was discovered on April 25. The company's investigation later revealed the data was accessed more than a month earlier, on or around March 19, and was later stolen.

The notices the company sent to affected customers say the stolen information may include name, phone number, email address, mailing address, date of birth, account history, driver's licence, social insurance number and bank account numbers. Nova Scotia Power has confirmed the hackers who stole data have published it on the dark web.

Experts are warning people to be on guard and proactive if their information was stolen.

"I would look at any credit activity from March until now," said Spence Hutchinson, a threat intelligence researcher with cybersecurity firm eSentire.

Hutchinson said the theft of personal information can lead to identity fraud and bank fraud.

"I would certainly direct folks to the actual Nova Scotia Power website and [copy the] contact details there.… I would be very vigilant and wary about phone calls and messages outside those approved channels," he said.

RCMP say anyone who believes they are the victim of fraud should call police or report the incident to the Canadian Anti-Fraud Centre.