On November 12, 2025, TELUS Digital AI, formerly TELUS International, identified unauthorized access to a limited number of its systems. The company learned on March 18, 2026, that personal information from individuals who participated in research studies or provided services was accessed by an unauthorized third party. The incident was reported to the Attorneys General of Texas, Vermont, and Washington.
The breach exposed names, addresses, full dates of birth, Social Security numbers, and government-issued ID numbers. For a smaller number of individuals, limited protected health information and financial account numbers were also exposed. At least 625 Texas residents and 9,343 Washington residents were affected.
While the company has disclosed the breach, specific details regarding notification methods for all affected individuals are not publicly available. Further information may emerge as the investigation progresses.