Telus Digital hit with massive data breach

Telus Digital, a global BPO provider, has been hit by a large-scale cyberattack attributed to extortion group ShinyHunters, which claims to have stolen over one petabyte of data. Unlike ransomware, the attack involved long-term credential abuse, lateral movement, and slow data staging to avoid detection. Security experts characterize it as a strategic, identity-based intrusion rather than a perimeter breach. Recommended mitigations include treating identity as the new perimeter, enforcing MFA everywhere, implementing data-centric monitoring, network segmentation, and behavioral analytics to detect abnormal trusted behavior.