Published 5 months ago • loading... • Updated 5 months ago
Telus says it is investigating hack of its systems
ShinyHunters extortion gang stole nearly 1 petabyte of data including call records, source code, and financial info from Telus Digital, which is investigating and notifying affected clients.
TELUS Digital, a Canadian business process outsourcing provider, confirmed yesterday it suffered a security incident after threat actors claimed to have stolen nearly 1 petabyte of data in a multi-month breach.
ShinyHunters, an extortion gang, allegedly breached Telus using Google Cloud Platform credentials discovered during the Salesloft Drift breach, then pivoted into other systems using cybersecurity tools to scan for additional credentials.
Demanding $65 million in exchange for not leaking stolen data, ShinyHunters claims to have accessed "BPO operations, as well as call records for Telus," affecting numerous client companies relying on the provider.
Telus told BleepingComputer the company is "investigating a cybersecurity incident involving unauthorized access to a limited number of our systems." The company has engaged cyber forensics experts and is working with law enforcement.
The ShinyHunters extortion gang has been one of the most prolific threat actors this year, targeting SaaS environments including Salesforce and Microsoft. More recently, they conduct voice phishing attacks to hijack single sign-on accounts for Okta and Slack.