Stock Markets March 12, 2026

Telus Probes Unauthorized Access After Hackers Claim Data Theft

Canadian telecom confirms limited system intrusion; extortion group alleges supply-chain theft and ransom demand

By Maya Rios TU T
Telus Probes Unauthorized Access After Hackers Claim Data Theft
TU T

Telus Corp. said it is investigating a cybersecurity incident involving unauthorized access to a limited number of its systems and is notifying affected customers. An extortion group calling itself ShinyHunters claims it stole a large volume of Telus data in an August supply-chain attack and says it sent a ransom demand in February.

Key Points

  • Telus has confirmed an investigation into unauthorized access to a limited number of its systems and is notifying affected customers.
  • An extortion group called ShinyHunters claims it exfiltrated a large amount of Telus data in August via a supply-chain attack and says it sent a February ransom demand in Bitcoin.
  • The alleged compromised data purportedly includes information tied to Telus customers that the group said includes technology companies and banks - sectors that may be affected.

Telus Corp. (NYSE:TU) has opened an investigation into a cybersecurity incident after detecting unauthorized access to a limited portion of its systems, according to reporting from Bloomberg. The Canadian telecommunications company disclosed the breach on Thursday.

A spokesperson from Telus Digital told Bloomberg that, once the activity was discovered, the company acted immediately to address the intrusion and to harden affected systems against further access. The company said it is actively managing the situation and maintaining close monitoring.

Telus, which ranks among Canada’s three largest mobile and broadband providers, said it is notifying customers who have been affected. The company did not provide specifics on the number of systems or customers involved.

An extortion group identifying itself as ShinyHunters told Bloomberg this week that it plans to publish a substantial quantity of data it claims to have taken from Telus in August through a supply-chain attack. The group also said it issued a ransom note to Telus in February requesting payment in Bitcoin; the amount requested was redacted in the note seen by Bloomberg.

The hackers asserted that the data they obtained includes information belonging to Telus customers, which they said comprises technology firms and banks. Telus has not provided a public tally of which customers, if any, were exposed or the scope of data allegedly taken.


Context and corporate action

Telus has communicated that it is taking steps to secure its systems and is monitoring developments closely. A Telus Digital spokesperson emphasized immediate remediation and ongoing oversight following discovery of unauthorized activity.

Claims from alleged attackers

The group calling itself ShinyHunters claims both possession of a large trove of August-origin data and that it issued a ransom demand in February payable in Bitcoin. The purported ransom note reviewed by Bloomberg had the demanded amount redacted.


Promotional note appearing in the original report

The original article included a separate promotional segment about a stock-picking tool called ProPicks AI that evaluates companies including the ticker T using financial metrics. That segment described how the tool ranks stocks by risk-reward and mentioned prior winners, and offered readers the option to see if T is featured in any strategies. This rewrite preserves the factual existence of that promotional content but does not include performance guarantees.

Risks

  • Uncertainty over the number of systems and customers impacted, which leaves potential exposure and remediation costs unclear - relevant to telecom and enterprise customers in technology and banking sectors.
  • Claims by an extortion group that it will publish stolen data introduce the risk of data disclosure and regulatory or reputational consequences for Telus and its clients.
  • Ongoing monitoring and remediation efforts may require additional resources and could disrupt operations or customer trust while the investigation continues.

More from Stock Markets

Amazon Said to Shift Prime Day into Late June, Moving Event Into Q2 Mar 12, 2026 Stryker Says Cyberattack Disrupts Orders, Production and Shipments Mar 12, 2026 Lennar Reports Q1 Deliveries Below Expectations as Affordability Concerns Persist Mar 12, 2026 Contractor Fatally Injured at Rio Tinto’s Kennecott Mine; Site Operations Suspended Mar 12, 2026 Amazon Moves Prime Day Into June, Shifting Calendar and Quarterly Revenue Mar 12, 2026