Nova Scotia government

DISCLOSED 2023-06-06 · SUPPLY CHAIN

The Nova Scotia government is investigating the theft of personal information resulting from a global privacy breach of the MOVEit file transfer system. The breach is attributed to the Clop ransomware group exploiting a vulnerability in the software. The extent of records exposed and the specific data types beyond personal information have not been disclosed.

The record

What we know

Disclosed

2023-06-06

Attack vector

Supply Chain

Sector

government

Country

Canada

Data classes exposed

personal information

ColdRecon assessment

Could a positive-security control have prevented this?

Verdict · unclear · opinion

The breach involved a third-party file transfer system (MOVEit), not an endpoint compromise. A positive-security model on endpoints would not directly prevent exploitation of a server application vulnerability.

Our assessments are opinion, grounded in the cited public facts. Read them critically.

Sources

Cited reporting

↗ capebretonspectator.com (2023-06-06)

Similar vector · recent

Other supply chain breaches on file

This page is the permanent ColdRecon entry for the Nova Scotia government disclosure. It updates if new public reporting emerges. All tracked breaches →

Nova Scotia government just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →