Telus, one of Canada’s largest telecom providers, is notifying some customers that their accounts have been breached and their personal information has been accessed.
In data breach notifications sent to customers whose consumer telecom accounts were affected, Telus said the intrusions occurred between February 2025 and June 2026.
According to the company, the attacker used compromised credentials to access Telus accounts and the information they store, including names, account numbers, phone numbers, billing addresses, email addresses, partial payment card numbers, subscription details, and payment history.
Telus said the obtained account information has been used to attempt to convince customers to move their services to competitors, and in some cases the attackers made unauthorized changes to the victim’s services.
It’s unclear how many accounts the breach affected.
Telus said it has reset the compromised credentials and added enhanced security monitoring to impacted accounts. The Vancouver Police Department has been notified, and victims have been offered complimentary identity theft protection services.