Privacy Breach

Privacy Breach

On Friday, June 9, the following message was sent to students/families with children in HRCE ages 16-18, as of January 31, 2023.

Students/Families:

I am sharing the following information on behalf of the Government of Nova Scotia.

As you may know, there was a cybersecurity incident recently involving the Government of Nova Scotia. As a result of this incident, personal information may have been taken that pertains to students aged 16-18 (as of January 31, 2023).

The breach

On June 1, 2023, the Government of Nova Scotia became aware about a vulnerability with a file transfer service called MOVEit. As part of that investigation, it was confirmed that over a period of May 30, 2023 – May 31, 2023, government files that were in the MOVEit system were stolen. On June 3, 2023, it was confirmed that some of these files included personal information.

Government took immediate steps to ensure no additional information was at risk and kept the MOVEit system offline until enhanced security measures could be put in place. On June 4, 2023, government notified the Canadian Centre for Cyber Security, the police, and the Office of the Information and Privacy Commissioner.

Information Affected

The following personal information for students aged 16-18 (as of January 31, 2023), which is shared with Elections Nova Scotia as per the Elections Act for pre-registration of voting, may have been part of the privacy breach, including the following:

  • Full name
  • Gender
  • Date of birth
  • School attended
  • Student ID
  • Civic address
  • Mailing address

This individual breach does not include individual Social Insurance Numbers or banking information.

Government is looking at how it can support individuals directly affected by this privacy breach. More information may be shared with you in the future.

Other steps

Updates and information on this breach, including advice for potential victims, is available at https://novascotia.ca/privacy-breach/

General cyber-safety information is available at https://www.getcybersafe.gc.ca/en

We regret the concern this undoubtedly causes you. Please be assured that we are taking this matter very seriously

Sincerely,

Steve Gallagher
Regional Executive Director