Canadian BPO Provider Telus Digital Hacked, Exposing 1 PB of Sensitive Data

Telus Digital, a business process outsourcing provider owned by Canadian telecom operator TELUS, offers customer service, content moderation and AI data services. It holds sensitive information including customer calls and corporate system data. The incident is suspected to be linked to the 2025 Salesloft Drift supply-chain attack, with stolen credentials potentially providing a foothold into Google Cloud Platform.

In March 2026, Telus Digital confirmed that a small number of systems had been accessed without authorization, but said its operations and customer-facing services were not disrupted. ShinyHunters claimed it stole nearly 1 PB of data in February, including source code and customer call records, and demanded $65 million. The actual scale of the breach remains subject to forensic confirmation.