Government of Nova Scotia

DISCLOSED 2023-06-09 · UNPATCHED CVE

The Government of Nova Scotia reported that the MOVEit cyber security breach compromised personal data of some members of the public and public service. Stolen records include names, addresses, and client IDs of 54 Department of Community Services clients. The breach is part of the wider exploitation of a vulnerability in the MOVEit Transfer software.

The record

What we know

Disclosed

2023-06-09

Attack vector

Unpatched Cve

Sector

Government

Country

Canada

Domain

novascotia.ca

Data classes exposed

namesaddressesclient ID

ColdRecon assessment

Could a positive-security control have prevented this?

Verdict · unclear · opinion

The breach involved a third-party file transfer service (MOVEit) rather than an endpoint, so a positive-security endpoint model would not have prevented it.

Our assessments are opinion, grounded in the cited public facts. Read them critically.

Sources

Cited reporting

↗ news.novascotia.ca (2023-06-09)

Similar vector · recent

Other unpatched cve breaches on file

This page is the permanent ColdRecon entry for the Government of Nova Scotia disclosure. It updates if new public reporting emerges. All tracked breaches →

Government of Nova Scotia just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →