Telus Warns Customers of Account Breaches
At a glance
- Severity
- Low
- Used in attacks
- No flaws named
- Reported by
- 1 outlet
Telus, one of Canada’s largest telecom providers, is notifying some customers that their accounts have been breached and their personal information has been accessed.
In data breach notifications sent to customers whose consumer telecom accounts were affected, Telus said the intrusions occurred between February 2025 and June 2026.
According to the company, the attacker used compromised credentials to access Telus accounts and the information they store, including names, account numbers, phone numbers, billing addresses, email addresses, partial payment card numbers, subscription details, and payment history.
Telus said the obtained account information has been used to attempt to convince customers to move their services to competitors, and in some cases the attackers made unauthorized changes to the victim’s services.
It’s unclear how many accounts the breach affected.
Telus said it has reset the compromised credentials and added enhanced security monitoring to impacted accounts. The Vancouver Police Department has been notified, and victims have been offered complimentary identity theft protection services.
Advertisement. Scroll to continue reading.
Telus’ brief description of the incident suggests the accounts were targeted in a credential stuffing or other account-takeover campaign involving credentials obtained from a third party. However, the company has not said specifically that the abused passwords came from a third party.
In March, subsidiary Telus Digital confirmed suffering a data breach after the notorious ShinyHunters cybercrime group claimed to have stolen roughly 1 petabyte of information from the company’s systems.
SecurityWeek has reached out to Telus for additional information, including the number of affected accounts and clarification on the source of the credentials the attacker abused.
Related: Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack
Reproduced in full under licence from SecurityWeek. © SecurityWeek. Written by Eduard Kovacs.
Coverage
One outlet has carried this so far.
2026-09-14 09:56 UTC
Related stories
- Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers
The Hacker News · 2026-09-16
- PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug
Infosecurity Magazine · 2026-09-16
- Webinar: What happens in the first hours of a Google Workspace breach
BleepingComputer · 2026-09-16
- N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
The Hacker News · 2026-09-16
- Threat Intelligence Alone Won't Close the Exploitation Gap
The Hacker News · 2026-09-16