Outsourcer Telus admits to attack, possibly by ShinyHunters

Infosec In Brief Canadian outsourcer Telus Digital has admitted it fell victim to a cyberattack.

The company said it is “investigating a cybersecurity incident involving unauthorized access to a limited number of our systems” and “took immediate steps to address the unauthorized activity and secure our systems against further intrusion. “

Telus is now “actively managing the situation and continue[s] to monitor it closely.”

Those soothing words contrast with reports that Telus has leaked a petabyte or more of data, and that crime gang ShinyHunters did the deed after acquiring valid Google Cloud Platform credentials as a result of the Salesloft breach.

…