Telus Notifies Customers of Account Breaches, Personal Data Accessed

Account Breaches Disclosed by Telus

Telus, a prominent Canadian telecom company, has begun notifying customers that their accounts were breached. The company stated that these intrusions took place over an extended period, specifically between February 2025 and June 2026.

Compromised Data and Attack Methods

Attackers gained access to Telus accounts using compromised credentials. The accessed information includes names, account numbers, phone numbers, billing addresses, email addresses, partial payment card numbers, subscription details, and payment history. Telus suggests the method involved credential stuffing or similar account takeover tactics, though the source of the compromised credentials has not been explicitly stated.

The stolen account information was subsequently used by attackers to attempt to persuade customers to transfer their services to competing providers. In some instances, unauthorized modifications were made to the victims' services.

Telus Response and Mitigation

In response to the breaches, Telus has reset the compromised credentials for affected accounts and implemented enhanced security monitoring. The company has also reported the incidents to the Vancouver Police Department and is offering complimentary identity theft protection services to the impacted customers. The total number of affected accounts remains undisclosed.

Context and Previous Incidents

This incident follows a separate data breach confirmed in March by Telus Digital, a subsidiary, where the ShinyHunters cybercrime group claimed to have exfiltrated a significant volume of data. The current notification pertains specifically to consumer telecom accounts.