Dutch telecom Odido's customer contact system breached for two days; 6.2 million accounts with bank and ID numbers exposed

Dutch telecom Odido said a cyberattack involved personal data from a customer contact system it uses, not passwords, call records or billing data, and that it notified the Dutch data protection authority AP ^[1]. According to NOS, an Odido spokesperson said criminals had access to a file with data on 6.2 million accounts, including names, addresses, phone numbers, emails, bank account numbers, birth dates and passport or driver's licence numbers; NRC reported the access occurred on February 7 and 8 ^[2][3]. Odido urges all customers to be extra alert to suspicious activity and unexpected calls, texts or emails ^[2].

Industries mainly affected: Telecom

1. Be alert to calls, texts, WhatsApp messages and emails impersonating Odido, your bank or other organizations ^[2].
2. Check Odido's security information page for steps you can take .