Telus Digital confirms breach after hacker claims 1 petabyte data theft (www.bleepingcomputer.com)

submitted 2 months ago by recursive_recursion@piefed.ca to c/canada@lemmy.ca

11 comments fedilink hide all child comments

cross-posted from: https://lemmy.zip/post/60717930

Canadian business process outsourcing giant Telus Digital has confirmed it suffered a security incident after threat actors claimed to have stolen nearly 1 petabyte of data from the company in a multi-month breach.

top 11 comments

sorted by: hot top new old

[-] nik282000@lemmy.ca 19 points 2 months ago

How do you not notice a petabyte of surprise egress?

[-] lauha@lemmy.world 11 points 2 months ago

If you don't monitor anything

[-] Voroxpete@sh.itjust.works 10 points 2 months ago

What I want to know is where the fuck the hackers put a petabyte of stolen data.

[-] Geologist@lemmy.zip 6 points 2 months ago

I’ve worked with a ton of rack storage servers that handle like 45 disks. Even using older tech like 12-16TB drives you can get half a petabyte of usable space on one server even with raid array redundancies, etc.

Before the stupid AI hardware craze, these old enterprise servers were super cheap too, the main cost of running them was the power lol.

[-] Voroxpete@sh.itjust.works 1 points 2 months ago

I know, but that's still some serious hardware. Suggests state level backing or similar.

[-] nik282000@lemmy.ca 1 points 2 months ago

Eh, I have about 96tb of storage at home but a lot of it is backups, the actual data it holds is ~20tb. There are loads of homelabs bigger than my 2 server setup.

[-] runsmooth@kopitalk.net 16 points 2 months ago* (last edited 2 months ago)

In all, ShinyHunters claims to have stolen close to 1 petabyte of data belonging to the company and many of its customers, many of whom use Telus Digital as a BPO provider for customer support operations. BleepingComputer has not been able to independently confirm the total size of the stolen data.

The threat actor shared the names of 28 well-known companies allegedly impacted by the breach. However, BleepingComputer will not disclose the names of these companies, as we have been unable to independently confirm whether they were impacted.

The threat actor says that much of the data for these customers relates to BPO services provided by Telus Digital, including customer support and call center outsourcing, agent performance ratings, AI-powered customer support tools, fraud detection and prevention, and content moderation solutions.

I believe Telus also handles healthcare data for Alberta and beyond. Do we know if that's impacted?

[-] brax@sh.itjust.works 5 points 2 months ago

I was wondering the same. It's Telus Health that deals with that crap, not sure if that's separate from Telus Digital.

[-] non_burglar@lemmy.world 4 points 2 months ago* (last edited 2 months ago)

Parts of health data for BC and Alberta. Not an insignificant amount, but only a small view on BC HIPA data, not sure on AB, but I imagine the scope would be similar. They do have a relative stranglehold on home health mgmt software. Telus's relatively new foray into infosec has (rightfully) given health orgs pause in tendering and bids.

I know this because I carried out an app security audit for a BC health authority.