The large water tank at the Halifax Water commission in Halifax, October 2, 2025. Photo by Tim Krochak /Chronicle HeraldArticle contentHalifax Water is working to fix vulnerabilities in its cybersecurity protection after a privacy breach affected 16 customers.THIS CONTENT IS RESERVED FOR SUBSCRIBERS ONLY.Subscribe now to access this story and more:Unlimited access to the website and appExclusive access to premium content, newsletters and podcastsFull access to the e-Edition app, an electronic replica of the print edition that you can share, download and comment onEnjoy insights and behind-the-scenes analysis from our award-winning journalistsSupport local journalists and the next generation of journalistsSUBSCRIBE TO UNLOCK MORE ARTICLES.Subscribe or sign in to your account to continue your reading experience.Unlimited access to the website and appExclusive access to premium content, newsletters and podcastsFull access to the e-Edition app, an electronic replica of the print edition that you can share, download and comment onEnjoy insights and behind-the-scenes analysis from our award-winning journalistsSupport local journalists and the next generation of journalistsRegister to unlock more articles.Create an account or sign in to continue your reading experience.Access additional stories every monthShare your thoughts and join the conversation in our commenting communityGet email updates from your favourite authorsSign In or Create an AccountorArticle contentThe utility issued a news release detailing how some information from its Customer Connect portal was compromised because of a deficiency in the service provided by contracted vendor Avertra.Article contentArticle contentThe exposed information was limited to names, addresses, account ID information, email addresses and security questions and answers.Article contentArticle content“Our review found that a vulnerability in a third-party platform allowed unauthorized access to certain customer information,” Kenda MacKenzie, CEO of Halifax Water, said in the release Thursday.Article content“We are taking the time needed to understand the circumstances fully, protect customers’ interests, and address the related contractual and insurance matters appropriately.Article content“We are sorry for the concern this has caused. We have notified the 16 affected customers directly, expanded our cybersecurity testing, strengthened escalation processes for security-related incident reports, and will keep the portal offline until it can be restored securely.”Article content The Halifax Regional Water Commission building in Halifax, October 2, 2025. Photo by Tim Krochak /Chronicle HeraldArticle contentNo banking or financial details were accessed in the breach. It was not described as a cyberattack.Article content“Halifax Water’s payment systems and operational systems were not involved in this incident,” the release said.Article contentArticle content“The affected portal database did not include credit card or banking information, and the systems that control water and wastewater services were not affected.”Article contentArticle contentRoughly 55,000 customers hold portal accounts, so Halifax Water will return to sending bills and notices by mail until the glitches are fully corrected. A precise timeline for the repair isn’t available.Article content“The fix for the original vulnerability has been independently tested and confirmed effective, but further security testing has identified additional vulnerabilities,” said the release.Article content“That work is ongoing, and the portal will remain offline until Halifax Water is satisfied that service can be restored securely. No restoration date has been set.”Article content A detail of a Halifax Water logo on a work vehicle in Halifax, October 2, 2025. Photo by Tim Krochak /Chronicle HeraldArticle contentAs part of a chronology released by Halifax Water, the first red flag went up in November, and a six-month investigation and corrective process followed. Third-party forensic experts finalized their findings in June but Halifax Water continued its security upgrades and testing.
Halifax Water admits warning dismissed as ‘spam’after 16 customers’ personal information compromised
