{"id":"telus-digital-support-data-breach-mar-2026","category":"breach","status":"closed","title":"Telus Digital confirms breach after ShinyHunters claims nearly 1 petabyte of customer-support data stolen","tldr":"Telus Digital, the outsourced customer-support arm of Telus, confirmed unauthorised access to some systems after ShinyHunters claimed nearly 1 PB stolen. Volume and people affected are unconfirmed.","summary":"Telus Digital, which provides outsourced customer-support and other business services for Telus and other companies, confirmed on 11 March 2026 that it was investigating unauthorised access to a limited number of its systems. The extortion group ShinyHunters claims it stole nearly one petabyte of data over several months and demanded US$65 million not to leak it. It says it entered through Google Cloud credentials found in data from the earlier Salesloft Drift breach. BleepingComputer reviewed a sample of call records (times, durations, numbers and call-quality data) but could not verify the total. The group also claims call recordings, source code and financial data, and listed 28 affected companies, which BleepingComputer withheld as unverified. Telus says it contained the activity, added security measures, hired forensic experts and is working with law enforcement. It says services were not disrupted. It has not confirmed what was taken or how many people are affected, and says it will notify customers as appropriate. Telus reportedly did not engage with the extortion demand. As of the sources read, no later official update was found.","action":"Nothing to install. If Telus or a company that uses its support services notifies you, follow its advice and treat unexpected calls, texts or emails about your accounts with suspicion, since call records can be used to make scams convincing.","product":"Telus Digital customer-support and telecommunications data","audience":"both","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["telus","telus-digital","data-breach","shinyhunters","extortion","bpo","canada"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"news","title":"Telus Digital confirms breach after hacker claims 1 petabyte data theft","url":"https://www.bleepingcomputer.com/news/security/telus-digital-confirms-breach-after-hacker-claims-1-petabyte-data-theft/","by":"BleepingComputer","date":"2026-03-12"},{"kind":"news","title":"Telus Digital hit with massive data breach","url":"https://www.csoonline.com/article/4144560/telus-digital-hit-with-massive-data-breach.html","by":"CSO Online","date":"2026-03-12"}],"started":"2026-03-12","closed":"2026-03-12","created":"2026-11-03T21:19:59.212Z","updated":"2026-11-03T21:19:59.212Z","cve_notes":[],"timeline":[{"at":"2026-03-12","added":"2026-11-03T21:19:18.455Z","kind":"other","text":"Telus Digital told CSO Online it had contained the activity, hired forensic experts, was working with law enforcement and would notify affected customers as appropriate. It declined to confirm the size of the theft. CSO reported no figure for affected people.","url":"https://www.csoonline.com/article/4144560/telus-digital-hit-with-massive-data-breach.html","by":"CSO Online","patch":"na"},{"at":"2026-03-12","added":"2026-11-03T21:19:18.455Z","kind":"other","text":"ShinyHunters claimed nearly 1 petabyte stolen and demanded US$65 million not to leak it. It said it began extorting Telus in February. BleepingComputer saw a sample of call records but could not verify the total, and said Telus was not engaging with the attackers.","url":"https://www.bleepingcomputer.com/news/security/telus-digital-confirms-breach-after-hacker-claims-1-petabyte-data-theft/","by":"BleepingComputer","patch":"na"},{"at":"2026-03-11","added":"2026-11-03T21:19:18.455Z","kind":"disclosed","text":"Telus confirmed it was investigating unauthorised access to a limited number of its systems. BleepingComputer says Telus had been told of a breach in January and had not responded at the time.","url":"https://www.bleepingcomputer.com/news/security/telus-digital-confirms-breach-after-hacker-claims-1-petabyte-data-theft/","by":"BleepingComputer","patch":"na"}],"url":"https://hard.fyi/live/telus-digital-support-data-breach-mar-2026/","json":"https://hard.fyi/api/live?id=telus-digital-support-data-breach-mar-2026"}