Telus Says Attackers Accessed Customer Accounts and Personal Information
Summary
Telus says attackers used compromised credentials to access some customer accounts between February 2025 and June 2026, exposing personal and billing information. The company reset credentials and added monitoring; the number of affected accounts is unknown.
Key points
- Telus says intrusions affecting consumer telecom accounts occurred between February 2025 and June 2026; it has not disclosed how many accounts were affected.
- Attackers used compromised credentials to access account details, including names, contact information, partial payment card numbers, subscription details, and payment history.
- Telus says the information was used to try to persuade customers to switch providers, and attackers made unauthorized service changes in some cases.
- Telus reset compromised credentials and added enhanced security monitoring to impacted accounts.
- The Vancouver Police Department was notified, and affected customers were offered complimentary identity theft protection.
- The article suggests credential stuffing or another account-takeover campaign, but Telus has not confirmed the source of the credentials.
Article Details
- Victim Organization
- Telus
- Incident Type
- Unauthorized access to customer accounts using compromised credentials
- Data Types Exposed
- Names
- Account numbers
- Phone numbers
- Billing addresses
- Email addresses
- Partial payment card numbers
- Subscription details
- Payment history
- Affected Records
- Unknown; Telus has not disclosed the number of affected accounts.
- Affected Data Size
- Unknown
- Operational Impact
- Attackers used account information to try to persuade customers to move their services to competitors; some victims' services were changed without authorization. Telus reset compromised credentials and added enhanced security monitoring to impacted accounts.
- Ransom Or Extortion
- None reported for the customer-account breaches. Separately, ShinyHunters claimed to have stolen roughly 1 petabyte from Telus Digital.
- Claim Status
- confirmed