HALIFAX – Nova Scotia Power Inc. has announced that it will reintroduce late fees for overdue bills starting October 1, marking the first time the company has done so since a significant cyberattack hampered its billing processes last spring. This decision is part of the company's efforts to stabilize its operations following the disruption caused by the April 2025 ransomware attack.

Chris Lanteigne, the director of customer care at the privately owned utility, addressed reporters in Halifax, revealing that approximately nine percent of customers are currently behind on payments. This figure is notably double the percentage of customers who were delinquent in their payments before the cyber incident. The ransomware attack led to the breach of personal data for about 280,000 customers, including sensitive financial information and social insurance numbers, exacerbating billing complications.

The cyberattack in April 2025 severely disrupted Nova Scotia Power's automatic billing system, prompting the utility to resort to estimating bills for its customers. Unfortunately, many customers raised concerns that these estimated charges were inflated compared to their usual billing amounts. Lanteigne assured the media that all erroneous bills have since been corrected and urged customers to take advantage of the flexible repayment options offered by the utility to alleviate financial strain.

As Nova Scotia Power prepares to implement late fees, the company is likely hoping to encourage timely payments among its customer base, particularly as it seeks to recover from the ramifications of the cyberattack. With ongoing efforts to improve services and restore customer trust, the return to standard billing practices may serve as a crucial step in stabilizing their financial operations.

The situation underscores the challenges utilities face in safeguarding customer information while maintaining reliable billing systems. As companies like Nova Scotia Power adapt to these challenges, this incident highlights the importance of robust cybersecurity measures, especially in an era where digital threats are increasingly sophisticated.