SaskEnergy and SaskPower were recently notified by a third-party vendor of a cyber security incident involving one of its subcontractors. The vendor provides bill print and mail services to both utilities. A subset of billing records from April 2022 and January 2023 were accessed, which included customer information such as names, service and mailing addresses, outstanding balances, account numbers, and gas or power meter data. Following notification, SaskEnergy and SaskPower worked with the vendor, along with legal and external security experts, to conduct a thorough investigation. The...