Telus Digital Breach Claimed by ShinyHunters With Alleged 1PB Data Theft

Telus Digital confirmed it is investigating a cybersecurity incident involving unauthorized access to a limited number of systems after threat actors ShinyHunters claimed a multi-month intrusion and the theft of nearly 1 petabyte of data. Reporting indicates the alleged stolen data includes information tied to Telus’ BPO operations (which can include customer support, billing, and internal tooling for multiple client organizations) and call records associated with Telus’ consumer telecommunications business; Telus stated operations remain fully functional and said it has engaged external forensics support and law enforcement while it determines what data was taken and which customers were affected.

Additional details attributed to ShinyHunters claim the initial access path involved Google Cloud Platform (GCP) credentials that were allegedly found in data previously stolen during the Salesloft/Drift breach, suggesting credential reuse/exposure as a key risk factor. As of the reporting cited, Telus Digital had not yet appeared on the actor’s leak site, and the company had not publicly confirmed the attacker’s identity or the specific data types impacted beyond acknowledging the incident and ongoing investigation.