Canadian telecommunications provider Telus is investigating a major cybersecurity incident involving its business process outsourcing unit, Telus Digital. The company confirmed unauthorized access to its systems and has engaged forensic experts alongside law enforcement. Telus stated that its primary operations remain fully functional.
The hacking group ShinyHunters claims to have exfiltrated as much as one petabyte of data during a multi-month operation. This alleged theft includes corporate client data, consumer call records, source code, and sensitive financial information.
ShinyHunters reportedly attempted to extort Telus for $65 million. The group claims it initiated the breach using credentials discovered in data from a previous, unrelated security incident involving a third-party service.