In October 2025, TELUS Digital discovered that an unauthorized third party accessed its internal systems, leading to a data breach. The company disclosed this incident by July 31, 2026, and began notifying affected individuals by this date.
The compromised data included names, addresses, dates of birth, Social Security numbers, and government-issued identification numbers. For a limited number of individuals, protected health information and financial account numbers were also exposed. The breach affected at least 9,343 residents in Washington and 625 residents in Texas, with disclosure also made to the Vermont Attorney General. The total number of affected individuals is confirmed to be 9,968, based on these resident counts.
While details continue to emerge, the company has confirmed the exposure of sensitive personal and health information. Further information regarding the full scope of the breach may be released as investigations proceed.