Hackers Claim to Steal 1 Petabyte; TELUS Digital Confirms Massive Data Breach

Telus Digital confirmed the breach on March 12, saying it had detected “unauthorized access to a limited number of our systems” and was “actively managing the situation” while investigating the scope of the theft, BleepingComputer reported.

The intrusion is attributed to the ShinyHunters group, which claims to have exfiltrated close to one petabyte of data over several months. According to BleepingComputer, the hackers leveraged Google Cloud Platform credentials obtained in the earlier Salesloft‑Drift breach and used the trufflehog tool to harvest additional files from Telus’s environment.

ShinyHunters told BleepingComputer the stolen material includes customer‑support records, AI‑tool data, fraud‑prevention logs, Salesforce entries, source code, FBI background checks, financial information and voice recordings from outsourced call‑center agents. The group also listed 28 well‑known companies it says were impacted, though Mobilesyrup noted these claims remain unverified.

Bloomberg cited Telus’s statement that the company is “investigating a cybersecurity incident” and has taken immediate steps to secure its systems. The breach highlights the risk BPO providers face, as they house large volumes of client data across multiple industries, making them attractive targets for threat actors seeking broad access through a single compromise.

Regulators have not yet disclosed any formal penalties, and Telus has not provided a timeline for notifying affected customers. The incident adds to a string of high‑profile data breaches this year, underscoring the growing challenge of protecting outsourced digital services.