TELUS

Profile narrative

TELUS, also referenced as Telus Digital, is a Canada-headquartered telecommunications and digital services organization. Its core business is communications services, including wireless and wireline voice, internet connectivity, data services, and television or entertainment offerings. It serves consumer and business markets, and its broader portfolio includes technology-enabled services such as digital health. The supplied incident material shows that customer accounts, billing systems, service-management functions, and digital access channels are important parts of its operating environment.

TELUS operates in the Canadian telecommunications sector, where customer identity, account credentials, phone numbers, billing records, and service-change capabilities are sensitive operational assets. The known incidents describe exposure areas relevant to telecom and digital service providers, including account takeover, credential misuse, internal API access, source code protection, payroll data handling, and cloud-related credentials. In 2023, TELUS investigated claims after a threat actor leaked samples of internal employee data and advertised private source code repositories, payroll records, AWS keys, and a repository containing a “sim-swap-api” that could facilitate SIM swap attacks. The actor claimed possession of employee emails and data scraped from internal APIs, while TELUS stated that its investigation had not identified evidence of corporate or customer data compromise at that time.

Later incident material describes customer account breaches in which attackers used compromised credentials to access personal data such as names, account numbers, phone numbers, billing addresses, email addresses, partial payment card numbers, subscription details, and payment history. The stolen information was used to persuade some victims to switch service providers and to make unauthorized changes to their accounts. TELUS responded by resetting compromised credentials, adding enhanced security monitoring to affected accounts, notifying the Vancouver Police Department, and offering identity theft protection services to affected customers. The supplied context also references a breach at a subsidiary that was claimed by the ShinyHunters group, but it does not identify the subsidiary or provide further ownership details.

Incidents

3 incidents linked to this organisation.