Key Facts
SecurityWeek reports that Telus is notifying affected customers of account breaches occurring between February 2025 and June 2026. Telus said attackers used compromised credentials to access account records.
Technical Details
According to the report, accessed data can include names, account and phone numbers, billing and email addresses, partial payment-card numbers, subscription details, and payment history. The number of affected accounts has not been disclosed.
Impact & Mitigation
Telus says it reset compromised credentials, added enhanced monitoring, notified police, and offered affected customers identity-theft protection. Organizations should enforce phishing-resistant authentication and monitor for account takeover and unauthorized service changes.