Breaches and incidentsBriefReported by a reputable outlet, citing the company
Telus Digital: ShinyHunters claims about 1 PB stolen using GCP credentials found in Salesloft Drift loot
Telus confirmed “unauthorized access to a limited number of our systems” and said it was still determining what was taken and which customers were affected.
- Disclosed
What happened
- Telus confirmed “unauthorized access to a limited number of our systems” and said it was still determining what was taken and which customers were affected. ShinyHunters claims close to 1 petabyte, including BPO call-centre and support records, call detail records, voice recordings, source code and FBI background checks. BleepingComputer could not confirm the size; the group named 28 downstream client companies that BleepingComputer withheld as unverified.
- Initial access as claimed by ShinyHunters: Google Cloud Platform credentials found in data stolen during the 2025 Salesloft Drift breach, then a large BigQuery instance, then TruffleHog used to find more credentials for other Telus systems. Telus has not described the root cause.
- ShinyHunters claimed it and says it demanded $65 million; a source told BleepingComputer Telus was not negotiating.
- Telus engaged forensics firms and law enforcement.
Sources
- https://bleepingcomputer.com/news/security/telus-digital-confirms-breach-after-hacker-claims-1-petabyte-data-theft
- https://mobilesyrup.com/2026/03/12/hackers-steal-nearly-1000tb-of-data-from-telus-digital/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.