Data Breach
Telus Warns Customers of Account Breaches
September 14, 2026
Cybersecurity
Data Breach
Key Facts
Signal Type
Data Breach
Industry
Cybersecurity
Companies
Telus, Telus Digital, ShinyHunters, AdaptHealth, Surfshark
Date
September 14, 2026
Telus, one of Canada's largest telecom providers, is notifying customers that their accounts were breached between February 2025 and June 2026. The attacker used compromised credentials to access accounts, exposing names, account numbers, phone numbers, billing addresses, email addresses, partial payment card numbers, subscription details, and payment history.
The obtained information was used to attempt to convince customers to move their services to competitors, and in some cases, attackers made unauthorized changes to services. Telus has reset compromised credentials and added enhanced security monitoring to impacted accounts.
Customers with consumer telecom accounts are affected, though the exact number is unclear. Telus has notified victims and offered complimentary identity theft protection services. The Vancouver Police Department has been notified.
This incident follows a March breach at subsidiary Telus Digital, where ShinyHunters claimed to have stolen roughly 1 petabyte of data, indicating ongoing security challenges within the organization.
This breach highlights a critical need for cybersecurity solutions in the telecom sector, particularly for:
Telus's repeated security incidents make it a high-priority prospect for vendors offering these capabilities.
Monitor for additional disclosures from Telus, including the number of affected accounts and the source of the compromised credentials. The company has not specified whether the credentials came from a third party, which could expand the scope of the incident.
Also watch for regulatory or legal actions, as well as potential customer churn, which may drive Telus to invest more heavily in security infrastructure.
Source:
SecurityWeekGet cybersecurity signals in your CRM
Data breaches, ransomware events, funding rounds, and M&A across security vendors and targets.
