Telus Warns Customers of Account Breaches
Telus warns customers that attackers used compromised credentials to access accounts and personal data between February 2025 and June 2026.
Telus, one of Canada's largest telecom providers, is notifying customers that attackers accessed consumer telecom accounts using compromised credentials between February 2025 and June 2026. Exposed data includes names, account numbers, phone numbers, billing addresses, email addresses, partial payment card numbers, subscription details, and payment history. The stolen information was used to push customers toward competitors and to make unauthorized service changes; the number of affected accounts is undisclosed. Telus reset credentials, added enhanced monitoring, notified Vancouver police, and offered identity theft protection; the incident may be credential stuffing and follows a ShinyHunters-claimed breach of subsidiary Telus Digital.
- Attackers used compromised credentials to access Telus accounts from February 2025 to June 2026.
- Exposed data includes names, phone numbers, billing addresses, partial card numbers, payment history.
- Stolen info was used to lure customers to competitors and make unauthorized service changes.
- Telus reset credentials, notified police, and offered identity theft protection; affected account count unknown.
From the original article
1 min read at securityweek.com
Stolen credentials were used in a multi-month campaign to access subscriber personal data and billing records. The post Telus Warns Customers of Account Breaches appeared first on SecurityWeek.
By Eduard Kovacs · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.