Yes, TELUS Digital confirmed on March 12, 2026, that it is investigating a cybersecurity incident following claims by the threat actor group ShinyHunters that they exfiltrated nearly 1 petabyte of data.

Key Details of the Breach

• The Claim: Attackers assert they stole 1 PB of data, including customer support records, call logs, source code, and employee information.
• Point of Entry: The hackers claim they breached the company using Google Cloud Platform (GCP) credentials allegedly stolen during a separate breach of Salesloft Drift.
• Current Status: TELUS Digital has stated that business operations remain fully functional and there has been no disruption to customer connectivity. They are currently working with law enforcement and forensic experts to determine the full scope of the unauthorized activity.

Context

This incident follows a string of security challenges for the company. In June 2025, the company’s AI division was fined by South Korean regulators for delaying a data breach notification, and in February 2023, it investigated a separate leak involving employee info and source code.