Telus Warns Customers of Account Breaches

Attackers exploited compromised customer credentials to access Telus subscriber accounts over a four-month window, highlighting how reused or stolen passwords can grant persistent unauthorized access to sensitive personal and financial data. The breach exposed names, contact details, billing information, and partial payment card numbers — exactly the data needed to fuel SIM-swapping and account port-out fraud. The extended duration of the breach (February to June 2025) suggests insufficient anomaly detection and response controls were in place to flag unusual login patterns or unauthorized account changes. This incident matters because telecom account takeovers can cascade into broader identity theft, financial fraud, and loss of phone number control, which attackers leverage to bypass SMS-based multi-factor authentication on other platforms.