Telus Digital, a Canadian BPO subsidiary of Telus Corporation, confirmed a security breach after threat actor group ShinyHunters claimed to have exfiltrated approximately 1 petabyte of data, including employee PII, customer data held on behalf of Telus Digital clients, and internal business records. The full scope has not been confirmed by the company; an investigation is ongoing. Organizations that engage Telus Digital as a BPO or data processor face potential third-party data exposure risk and should assess their contractual breach notification obligations.