Halifax Water received a report about a vulnerability in its customer portal in February, but the initial email was dismissed as spam. After a follow-up, the issue was escalated, leading to the portal being taken offline and the discovery that 16 customer accounts had been accessed. Experts note that the reporter was an unauthorized third party, which complicates the classification of the act as ethical hacking. The incident has prompted the utility to expand its cybersecurity testing and strengthen its escalation processes for security incidents.
Read the full story at cbc.ca.
