Telus Confirms Unauthorized Access to Customer Accounts, Exposing Personal Data
Telus has notified customers of unauthorized access to a small number of telecom accounts, where attackers used compromised credentials to infiltrate systems between February 2025 and June 2026. The breach was detected and blocked by the company, though the exact number of affected accounts remains undisclosed.
The intruders accessed sensitive customer data, including full names, account numbers, billing addresses, phone numbers, email addresses, the last four digits of payment cards, service details, billing amounts, and payment histories. In some cases, the attackers exploited this information to impersonate Telus representatives, attempting to persuade customers to switch providers or make unauthorized changes to their services.
Telus has notified impacted customers, offering two years of complimentary identity theft protection through Norton’s Telus Guardian service, available for enrollment until November 30, 2026. The protection includes dark web monitoring, credit monitoring, identity restoration support, and financial reimbursement with coverage up to $1 million for legal and expert fees. Affected customers also receive a 90-day free subscription to Norton Security Deluxe.
The company has reported the incident to law enforcement and the Privacy Commissioner of Canada, urging customers to monitor their accounts for suspicious activity and remain cautious of unsolicited service offers.
This breach follows a March 2026 incident in which hackers stole nearly a petabyte (1,000TB) of data from Telus and demanded a $65 million ransom to prevent its release. The latest disclosure adds to growing concerns over credential-based attacks in the telecom sector.
Source: https://mobilesyrup.com/2026/09/11/telus-customer-information-exposed-data-breach/
Telus TPRM report: https://www.rankiteo.com/company/telus
"id": "tel1789172982",
"linkid": "telus",
"type": "Breach",
"date": "9/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Small number (exact number '
'undisclosed)',
'industry': 'Telecommunications',
'location': 'Canada',
'name': 'Telus',
'type': 'Corporation'}],
'attack_vector': 'Compromised Credentials',
'customer_advisories': 'Yes (notifications sent to impacted customers, public '
'advisory)',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full names',
'Account numbers',
'Billing addresses',
'Phone numbers',
'Email addresses',
'Last four digits of payment '
'cards',
'Service details',
'Billing amounts',
'Payment histories']},
'date_detected': '2026-06',
'description': 'Telus confirmed unauthorized access to a small number of '
'telecom accounts, where attackers used compromised '
'credentials to infiltrate systems between February 2025 and '
'June 2026. The breach exposed sensitive customer data, '
'including personal and financial information. Attackers also '
'impersonated Telus representatives to manipulate customers.',
'impact': {'brand_reputation_impact': 'Moderate to High',
'data_compromised': 'Personal and financial information, service '
'details, billing history',
'identity_theft_risk': 'High',
'operational_impact': 'Customer account manipulation, fraudulent '
'service changes',
'payment_information_risk': 'Moderate (last four digits of payment '
'cards exposed)',
'systems_affected': 'Customer account systems'},
'initial_access_broker': {'entry_point': 'Compromised credentials'},
'investigation_status': 'Ongoing',
'motivation': 'Data Theft, Impersonation, Financial Gain',
'post_incident_analysis': {'corrective_actions': 'Identity theft protection, '
'customer notifications, law '
'enforcement reporting',
'root_causes': 'Compromised credentials, lack of '
'multi-factor authentication '
'(implied)'},
'recommendations': 'Monitor accounts for suspicious activity, remain cautious '
'of unsolicited service offers, enable multi-factor '
'authentication',
'references': [{'source': 'Telus Customer Notification'}],
'regulatory_compliance': {'regulatory_notifications': ['Privacy Commissioner '
'of Canada']},
'response': {'communication_strategy': 'Customer advisories, public '
'disclosure',
'containment_measures': 'Breach detection and blocking',
'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'Yes',
'recovery_measures': 'Complimentary identity theft protection, '
'credit monitoring, dark web monitoring',
'remediation_measures': 'Customer notifications, identity theft '
'protection, account monitoring',
'third_party_assistance': 'Norton (identity theft protection)'},
'title': 'Telus Unauthorized Access to Customer Accounts',
'type': 'Unauthorized Access'}