Telus Digital Confirms Security Incident as ShinyHunters Claims Data Theft
Summary
Telus Digital confirmed a security incident after ShinyHunters claimed it accessed systems using credentials from a prior third-party theft and exfiltrated nearly 1 petabyte of data. The group is demanding $65 million.
Key points
- Telus Digital confirmed a security incident; the reported data theft and access details are claims by ShinyHunters.
- ShinyHunters claims it used Google Cloud Platform credentials obtained in a prior third-party data theft to access Telus Digital systems.
- The group alleges nearly 1 petabyte of data was taken, affecting Telus Digital, its consumer telecom division, and at least 28 corporate customers.
- Allegedly affected data includes call records, support-call recordings, source code, Salesforce data, financial information, and FBI background checks.
- ShinyHunters is reportedly demanding $65 million to prevent public release of the claimed stolen data.
Article Details
- Victim Organization
- Telus Digital
- Incident Type
- Telus Digital confirmed a security incident. ShinyHunters claims it breached the company using Google Cloud Platform credentials obtained from a prior third-party data theft.
- Data Types Exposed
- Call detail records
- Customer support call recordings
- FBI background checks
- Financial information
- Source code
- Salesforce data and customer support tickets
- Agent performance ratings
- Data from AI-powered customer support tools
- Fraud detection, prevention, and content moderation records
- Affected Data Size
- ShinyHunters alleges that nearly 1 petabyte of data was exfiltrated.
- Operational Impact
- ShinyHunters alleges the data affected Telus Digital's internal operations, its consumer telecommunications division, and at least 28 corporate customers. No specific service disruption is reported.
- Ransom Or Extortion
- ShinyHunters reportedly demands $65 million to prevent public release of the allegedly stolen data; the article does not independently confirm the demand or exfiltration.
- Claim Status
- claimed
MITRE ATT&CK
Threat Actors
Products
Industries
business process outsourcingTelus Digital, the digital services and business process outsourcing (BPO) arm of the Canadian telecommunications provider Telus, has confirmed a security incident following claims of a massive data theft.TelecommunicationsTelus Digital, the digital services and business process outsourcing (BPO) arm of the Canadian telecommunications provider Telus, has confirmed a security incident following claims of a massive data theft.