In all, ShinyHunters claims to have stolen close to 1 petabyte of data belonging to the company and many of its customers, many of whom use Telus Digital as a BPO provider for customer support operations. BleepingComputer has not been able to independently confirm the total size of the stolen data.
The threat actor shared the names of 28 well-known companies allegedly impacted by the breach. However, BleepingComputer will not disclose the names of these companies, as we have been unable to independently confirm whether they were impacted.
The threat actor says that much of the data for these customers relates to BPO services provided by Telus Digital, including customer support and call center outsourcing, agent performance ratings, AI-powered customer support tools, fraud detection and prevention, and content moderation solutions.
I believe Telus also handles healthcare data for Alberta and beyond. Do we know if that's impacted?