Nfld. & Labrador

Cybersecurity breach could affect some North Atlantic home heating customers

A North Atlantic spokesperson said some customers who purchase home heating fuels from the company could be affected but the company’s retail gas network was not affected.

'It remains unclear what information was downloaded,' company says

Some home heating customers may be affected by a cybersecurity breach at NARL Marketing, the company that runs North Atlantic. (North Atlantic)

A cybersecurity breach at North Atlantic could be affecting some home heating customers in Newfoundland and Labrador.

In a statement released Sunday morning, the company said "an unauthorized third party" accessed a NARL Marketing employee's email account between 8:06 a.m. and 12:18 p.m. on April 13.

"While the employee email was compromised, the unauthorized third party downloaded information from the email account. At this stage of the investigation, it remains unclear what information was downloaded," the statement reads.

"We understand the email account contains personal information such as names and contact information, banking and financial information for some of our customers and business associates."

The breach was contained, according to the statement, and a team of cybersecurity experts have been engaged to investigate and identify what information was accessed and who was affected. The RCMP and federal privacy commissioner have also been made aware of the breach.

NARL Marketing operates more than 50 North Atlantic gas stations throughout Newfoundland and Labrador and sells home and commercial heating fuels.

In an email to CBC News, a spokesperson for the company said some customers who purchase home heating fuels from North Atlantic could be affected but it's not clear how many. The company's retail gas network was not affected.

The spokesperson also said about 1,300 emails were sent out by the unauthorized party, with more than 300 returned undeliverable, and there was no customer information included in the emails.

"We have notified those customers and business associates that we understand received emails from the unauthorized user," the company's statement said.

"As more information becomes available, NARL will directly notify those individuals whose personal information is involved with this incident and advise what possible further steps may be taken to protect against risk of harm."

The company advises individuals who believe they may be affected by the incident to email

Read more from CBC Newfoundland and Labrador


To encourage thoughtful and respectful conversations, first and last names will appear with each submission to CBC/Radio-Canada's online communities (except in children and youth-oriented communities). Pseudonyms will no longer be permitted.

By submitting a comment, you accept that CBC has the right to reproduce and publish that comment in whole or in part, in any manner CBC chooses. Please note that CBC does not endorse the opinions expressed in comments. Comments on this story are moderated according to our Submission Guidelines. Comments are welcome while open. We reserve the right to close comments at any time.

Become a CBC Member

Join the conversation  Create account

Already have an account?