Dutch Telecom Giant Odido Announces Data Breach Exposing 6.2 Million Customers’ Sensitive Information
Published
Key Takeaways
- Massive Data Theft: Odido announced hackers stole personal data from 6.2 million customers, including personally identifiable data such as names, addresses, bank account numbers, and IDs.
- Vendor Compromise: The breach originated from a compromised customer contact system used by the telecom provider, rather than a direct attack on its core network.
- Security Response: Odido detected the unauthorized access, terminated the connection immediately, and reported the incident to the Dutch Data Protection Authority.
Odido, the largest mobile telecommunications provider in the Netherlands, has confirmed a significant data breach affecting approximately 6.2 million individuals. While the company's core operational networks remain secure, the attackers successfully exfiltrated a large volume of sensitive personal information.Â
The company revealed that cybercriminals gained unauthorized access to a customer contact system on February 7.
Dutch Telecom Cyberattack Linked to Vendor System
According to Odido CEO Søren Abildgaard, investigators traced the intrusion to a specific support system used for customer contact. The attackers exploited this entry point to exfiltrate data before security teams detected the anomaly and severed the connection. Stolen data includes:
- customer names,Â
- physical addresses,Â
- bank account numbers,Â
- phone numbers,Â
- email addresses,Â
- copies of identification documents, such as driver's licenses and passports, were also compromised.Â
The company has stated that current services remain unaffected, and no specific cybercriminal group has yet claimed responsibility for the attack. Odido will notify impacted customers directly.
Rising Trends in Customer Data Theft
Odido has warned customers in its release that criminals may attempt to impersonate company officials using these stolen verification details to gain further access to personal accounts or finances.
This incident highlights the growing risk of supply chain vulnerabilities in telecom cybersecurity. This month, the UNC3886 Cyberespionage group was linked to cyberattacks on Singapore telecom companies Singtel, StarHub, M1, and Simba Telecom, and China-nexus espionage APT UAT-7290 targeted telecom infrastructure in South Asia.
Related
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular