Telus Corp. Confirms Cybersecurity Breach Amid Extortion Threat

Canadian telecommunications giant Telus Corp. (NYSE: TU) is investigating a cybersecurity incident after unauthorized access was detected across a limited number of its internal systems. The company publicly disclosed the breach on Thursday, drawing attention to growing threats facing major telecom providers across North America.

Upon discovering the intrusion, a Telus Digital spokesperson confirmed that the company acted swiftly to contain the unauthorized activity and reinforce its defenses against further compromise. The company says it is actively monitoring the situation and has begun notifying customers who may have been affected, though officials have not confirmed the exact number of systems or individuals impacted.

The disclosure comes after extortion group ShinyHunters approached Bloomberg this week, claiming responsibility for a supply chain attack carried out in August. The group alleges it stole a significant volume of data and sent Telus a ransom demand in February, requesting payment in Bitcoin. The dollar amount listed in the ransom note was redacted in documents reviewed by Bloomberg.

ShinyHunters further claimed that sensitive data belonging to Telus customers — reportedly including technology firms and major financial institutions — was exposed during the breach. The group has threatened to publicly release the stolen data if its demands are not met.

Telus is among Canada's three largest mobile and broadband providers, serving millions of residential and business customers nationwide. A breach of this scale raises serious concerns about the cybersecurity resilience of critical telecom infrastructure and the cascading risks posed to enterprise clients operating within its network.

Cybersecurity experts continue to warn that supply chain vulnerabilities remain one of the most exploited attack vectors targeting large organizations. As the investigation unfolds, customers and stakeholders are advised to monitor official communications from Telus for updates regarding potential data exposure and remediation steps.