Hackers breached the Canadian process-outsourcing giant Telus Digital and may have accessed data belonging to the firm’s customers, which include major telecommunications, financial services, healthcare and media businesses.
“All business operations … remain fully operational and there is no evidence of disruption to customer connectivity or services,” Telus Digital said in a statement late last week. “We have implemented additional security measures to further safeguard our systems and environment.”
Telus Digital, a subsidiary of Vancouver-based Telus Corporation, did not identify the information the hackers accessed, saying its “investigation into the nature and scope of potentially impacted data is ongoing.” But the extent of the compromise could be vast — many large companies use Telus Digital’s customer-support services, including call centers, AI-powered chatbots and fraud-prevention algorithms.
The ShinyHunters cybercrime gang quickly took credit for the Telus Digital attack and claimed to have stolen 1 petabyte of data from the company. The hackers shared samples of the stolen data with Reuters, which reported that the trove included at least two dozen business customers’ “personally identifiable information” and call-center recordings.
ShinyHunters told BleepingComputer that it was able to hack Telus after it found the company’s Google Cloud Platform credentials in the massive haul of data it stole from Salesloft in 2025. ShinyHunters also shared a sample of stolen Telus data with BleepingComputer, which confirmed that it included call-center records.
Telus Digital said it does not believe the hack extended to Telus Corporation’s other business units, such as its broadband provider, its wireless carrier and its health-technology and precision-agriculture divisions. But Reuters said the stolen data included “FBI background check information and source code spanning multiple [Telus] business divisions.”
Telus Digital said it was working with law enforcement and “leading cyber forensics experts” to investigate the attack, and it promised to notify any affected customers.
ShinyHunters claims another big victim
If the Telus hack is the work of ShinyHunters, it would represent the latest in a string of high-profile breaches attributed to the cybercrime group, which first rose to prominence in 2020. In the past few years, ShinyHunters has hacked education-technology vendor PowerSchool, luxury-fashion powerhouse LVMH, Australian airline Qantas and British automaker Jaguar Land Rover, among other major companies.
In just the past few months, the group has claimed credit for attacks on the restaurant chain Panera Bread, the hospitality firm Wynn Resorts and Dutch wireless carrier Odido, with each intrusion leading to the publication of vast quantities of data on the dark web.
If ShinyHunters’ claims are accurate, the Telus Digital hack also illustrates the long tail of cybercrime campaigns, with the 2025 Salesloft Drift hack providing login credentials that opened the door to Telus’s networks.
