Atlantic Canada
Halifax Water breach raises questions about reporting security flaws
Oct 24, 2026 · Summarized by Fundy Tech from CBC
The 30-second version
Halifax Water missed an early vulnerability report, then took its Customer Connect portal offline after a follow-up. Information from 16 customer accounts was accessed.
Key points
- The first tip arrived in February and was dismissed as spam.
- Halifax Water found access to 16 customer accounts.
- The utility said in August it was expanding cybersecurity testing.
Why it matters
This is a reminder for households and small businesses that security reports need a clear intake process. If you manage customer portals, make it easy for people to report flaws safely. Slow responses can leave customer data exposed longer than needed.
Who’s affected: Halifax Water Customer Connect portal and 16 customer accounts
What to do
- Create a clear channel for security reports.
- Escalate any report that mentions a portal or login page.
- Review your incident response and testing process.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.