cyber.hendryadrian.com
Cyber Attack & Data Breach · bleepingcomputer.com

Dutch Police Suspect Local Hackers Were Involved in Odido Breach

· Original article ↗

Summary

Dutch police say they have strong indications that local hackers were involved in Odido’s breach. Odido reported access to its customer contact system and data exposure affecting 6.2 million customers; ShinyHunters claimed responsibility.

Key points

  • Police say a Dutch-speaking man allegedly impersonated an Odido IT employee in a phone call before the company was misled through phishing.
  • Odido said attackers accessed its customer contact system on February 7 and downloaded users’ personal data.
  • The breach reportedly affected 6.2 million customers; exposed information may include contact, financial and identification details.
  • Odido said call details, location data, billing data, identity-document scans and Mijn Odido passwords were not exposed.
  • ShinyHunters claimed responsibility and reportedly released an 88GB archive containing more than 15 million records; Odido has not formally attributed the breach.

Article Details

Victim Organization
Odido
Incident Type
Phishing-led intrusion involving a phone call in which a Dutch-speaking man allegedly impersonated an Odido IT employee, followed by access to the customer contact system and data theft.
Data Types Exposed
  • Full name
  • Address and city of residence
  • Mobile number
  • Customer number
  • Email address
  • IBAN
  • Date of birth
  • Passport or driver's license number and validity
Affected Records
Odido said 6.2 million customers were affected. ShinyHunters claimed to release an archive containing more than 15 million records; the archive's contents and relationship to the affected customer count are not independently confirmed in the article.
Affected Data Size
ShinyHunters reportedly released an 88 GB archive.
Operational Impact
Attackers accessed Odido's customer contact system and downloaded personal data. No operational disruption is reported.
Ransom Or Extortion
ShinyHunters claimed responsibility and reportedly published an archive of stolen records on its leak site. No ransom demand is reported.
Claim Status
confirmed

MITRE ATT&CK

T1566.004 · Spearphishing VoiceA Dutch-speaking man allegedly impersonated an Odido IT employee in a phone call shortly before the intrusion; police said the company was misled through phishing.

People

Stan DuijfHead of operations at the Dutch National Investigation and Interventions Unit; he described investigative traces secured in the Odido breach investigation.

Threat Actors

ShinyHuntersClaimed responsibility for the Odido breach and reportedly published an 88 GB archive of records on its leak site. Odido had not formally attributed the attack, so the group's responsibility is unconfirmed.

Countries

NetherlandsOdido is one of the largest Dutch telecommunications companies, offering mobile, broadband, and television services to millions of customers across the Netherlands.

Industries

TelecommunicationsThe Dutch National Police (Politie) says it has found “strong indications” that Dutch hackers have been involved in a February breach at the telecommunications provider Odido.

Related Articles