TELUS is notifying customers about unauthorized access to consumer telecom accounts that lasted from February 2025 through June 2026. Attackers reportedly used compromised credentials to access customer information including names, addresses, phone numbers, email addresses, account numbers, service details, billing information and the last four digits of payment cards. Some accounts also had unauthorized service changes. The attackers allegedly used the stolen information to contact customers and persuade them to switch services to competitors. TELUS says the compromised credentials have been terminated and affected customers are being offered two years of identity protection.