"TELUS Investigating Leak of Stolen Source Code, Employee Data"

TELUS, Canada's second-largest telecommunications company, is investigating a possible data breach after a threat actor released samples of what seems to be employee data online. The threat actor uploaded screenshots of the company's private source code repositories and payroll records. TELUS has found no evidence of corporate or retail customer data theft thus far and is continuing to monitor the potential problem. On February 17, a threat actor advertised what they claimed to be TELUS' employee list on a data breach forum, which included names and email addresses. The same threat actor had published another forum post by February 21, this time offering to sell TELUS' private GitHub repositories, source code, and payroll records. The seller also claims that the stolen source code contains the company's "sim-swap-api," which could allow attackers to conduct SIM swap attacks. This article continues to discuss TELUS investigating the sale of alleged stolen source code and employee information. 

Bleeping Computer reports "TELUS Investigating Leak of Stolen Source Code, Employee Data"


 

Submitted by Anonymous on