Halifax

The organisation is referred to by the alias Halifax.
Its headquarters is located in Canada.

On June 1 2023 a cyberattack exploited a known vulnerability in the MOVEit file transfer tool.
The attack targeted systems used by the Nova Scotia government.
This incident was identified as part of a broader campaign affecting multiple organisations.

The breach resulted in the exposure of personal information belonging to a wide range of individuals connected to the Nova Scotia government.
Affected groups included government employees, teachers, students, healthcare clients, and recipients of pension plans.
The specific data elements varied depending on the group involved.
For many individuals the compromised information consisted of names, addresses, dates of birth, and government identification numbers.
For a smaller subset of those affected the stolen data also included social insurance numbers and health‑related information.

The scope of the compromised data highlights the sensitivity of the information held by the Nova Scotia government.
Names and addresses are basic identifiers that can be used for identity theft when combined with other data.
Dates of birth and government identification numbers increase the risk of fraudulent activity.
Social insurance numbers and health information represent particularly high‑value data that can lead to severe privacy harms.

The Nova Scotia government issued a news release detailing the incident and its impact.
The release provided a timeline of the attack and guidance for those whose data may have been exposed.
It directed affected individuals to monitor their accounts and consider protective measures such as credit monitoring.