Telus Digital confirms breach after ShinyHunters claims nearly 1 petabyte of customer-support data stolen
Telus Digital, the outsourced customer-support arm of Telus, confirmed unauthorised access to some systems after ShinyHunters claimed nearly 1 PB stolen. Volume and people affected are unconfirmed.
Nothing to install. If Telus or a company that uses its support services notifies you, follow its advice and treat unexpected calls, texts or emails about your accounts with suspicion, since call records can be used to make scams convincing.
What’s happening
Telus Digital, which provides outsourced customer-support and other business services for Telus and other companies, confirmed on 11 March 2026 that it was investigating unauthorised access to a limited number of its systems. The extortion group ShinyHunters claims it stole nearly one petabyte of data over several months and demanded US$65 million not to leak it. It says it entered through Google Cloud credentials found in data from the earlier Salesloft Drift breach. BleepingComputer reviewed a sample of call records (times, durations, numbers and call-quality data) but could not verify the total. The group also claims call recordings, source code and financial data, and listed 28 affected companies, which BleepingComputer withheld as unverified. Telus says it contained the activity, added security measures, hired forensic experts and is working with law enforcement. It says services were not disrupted. It has not confirmed what was taken or how many people are affected, and says it will notify customers as appropriate. Telus reportedly did not engage with the extortion demand. As of the sources read, no later official update was found.
- What
- Breach
- Affects
- Telus Digital customer-support and telecommunications data
- Fixed in
- Nothing to patch
- Since
- 12 Mar 2026
- Closed
- 12 Mar 2026
Timeline
- UpdateNothing to patch
Telus Digital told CSO Online it had contained the activity, hired forensic experts, was working with law enforcement and would notify affected customers as appropriate. It declined to confirm the size of the theft. CSO reported no figure for affected people.
- UpdateNothing to patch
ShinyHunters claimed nearly 1 petabyte stolen and demanded US$65 million not to leak it. It said it began extorting Telus in February. BleepingComputer saw a sample of call records but could not verify the total, and said Telus was not engaging with the attackers.
- Made publicNothing to patch
Telus confirmed it was investigating unauthorised access to a limited number of its systems. BleepingComputer says Telus had been told of a breach in January and had not responded at the time.
Sources
- Telus Digital confirms breach after hacker claims 1 petabyte data theftBleepingComputer · 12 Mar 2026
- Telus Digital hit with massive data breachCSO Online · 12 Mar 2026