Telus recruitment platform hack exposes data of about 680,000 people
In 2023, Telus's recruitment platform for AI training data contributors was hacked, exposing the personal data of about 680,000 people worldwide, including 13,622 users in South Korea. Because administrator privilege checks were missing, ordinary user accounts could access all users' information. The Personal Information Protection Commission (PIPC) imposed a fine of 82 million won on Telus.
Key facts
- Affected organization
- Telus
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal data of about 680,000 people worldwide, including 13,622 in South Korea
- Cause / method
- Missing administrator privilege checks allowed ordinary user accounts to access all users' information
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- Inadequate privilege checks behind the 2023 data breach were confirmed, and Telus was fined 82 million won.
3 related reports
Other incidents at Telus
Telus Warns Customers of Account Compromise
Telus warned customers of an account compromise. The timing of the breach, the number of affected accounts and the specific attack method have not been confirmed.
Read on SecurityWeek ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.