Ca.News.Yahoo Halifax Water Customer Portal Breach Exposes Customer Data
Article Content
- •Unauthorized access to data from 16 customer accounts confirmed.
- •Breach linked to a vulnerability in a third-party platform.
- •Halifax Water has expanded cybersecurity measures post-incident.
In March 2026, Halifax Water experienced a privacy incident involving unauthorized access to information linked to 16 customer accounts through a vulnerability in a third-party platform powering its Customer Connect portal. An independent forensic investigation confirmed the breach, and affected customers were notified. The portal remains offline as Halifax Water works to secure it. The incident was not classified as a cyber attack but rather a privacy breach due to the vulnerability. The utility has since expanded its cybersecurity testing and strengthened its incident reporting processes. CEO Kenda MacKenzie expressed regret over the incident and emphasized the importance of customer security. No specific CVEs or hacking tools were mentioned in the articles.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Halifax Water in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
How many customer accounts were affected?
What measures is Halifax Water taking?
Is the Customer Connect portal back online?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…