Qulliq Energy Corp. hit by cyberattack

Qulliq Energy Corp. is investigating whether a recent cyberattack on its computer systems has compromised the banking information of any of its customers.

Nunavut’s electricity provider announced Thursday afternoon that its network was breached Jan. 15. The attack brought down the corporation’s customer care and administrative computer systems.

On its website Friday, QEC reported those services were still unavailable.

Power plants have not been affected by the breach.

QEC indicated it has brought in cybersecurity experts and the Government of Nunavut’s information technology teams to determine the scope of the attack.

“As soon as we learned there was a possible issue, we activated our crisis response plan to take control of the situation,” said Rick Hunt, president and CEO of QEC, in a news release. 

“Our focus is on returning to normal operations while determining what information may have been impacted.”

The energy corporation is urging its customers to keep a close eye on their banking and credit card accounts for unusual activity and consider updating passwords.

Nunavut Premier P.J. Akeeagok released a statement Thursday afternoon calling the attack criminal.

“Expert cybersecurity and legal advice have been obtained and RCMP are assisting QEC’s ongoing investigation,” he said, adding the GN has also pulled in personnel from the departments of Community and Government Services, Justice, Finance, and Executive and Intergovernmental Affairs to help the corporation respond to the attack.

QEC is not accepting credit card payments, but customers can still pay their bills using cash in person at the customer care offices in Iqaluit and Baker Lake, through Northern Stores, co-op stores, and banks or by bank transfer over the phone or internet.