Find notable cyber news and cases, enriched with sources, timelines, and signals.

Odido customers data exposed after Odido breach

Data Leak
First reported
Last updated
Happening score
H score 25
1 unique sources, 1 articles

Summary

Hide ▲

Odido disclosed a major data leak involving its customer contact system, exposing personal data for millions of customers. The compromised records included names, home and email addresses, IBANs, dates of birth, and passport or driver’s license numbers. Although no passwords, call details, or billing data were taken, the exposed information could support identity fraud and spear-phishing. Odido said it ended the unauthorized access quickly and is contacting impacted customers directly.

Related Happenings

Odido hit by network compromise

Incident
First: 12.02.2026 20:18 Last: 12.02.2026 20:18 Sources 1

How related: Although the firm pointed out that no passwords, call details, or billing data were taken in the raid, for some users, compromised information included names, home and email addresses, IBANs, dates of birth and passport/driver’s license numbers.

About this happening: **Odido** said a **cyberattack** exposed personal data from its **customer contact system**, affecting **6.2 million customers** after unauthorized access was detected on the week...

Latest development: 24.02.2026 13:40

ShinyHunters claimed responsibility for breaching Dutch telecommunications provider Odido, added the company to its dark web leak site, and said it had stolen nearly 21 million records. The gang also claimed the stolen material includes internal corporate data and plaintext passwords, while Odido denied that passwords, call details, social security numbers, or billing data are involved.

Timeline

  1. 16.02.2026 11:30 2 articles · 3mo ago

    Odido discloses customer contact system breach

    Initial Disclosure

    Odido disclosed a major data breach affecting its customer contact system and said as many as 6.2 million customers could be impacted. The company said no passwords, call details, or billing data were taken, but for some users the exposed information included names, home and email addresses, IBANs, dates of birth, and passport or driver’s license numbers. Odido said unauthorized access was ended as quickly as possible, external cybersecurity experts were engaged, operational services were not affected, and impacted customers will be contacted directly while being warned about suspicious calls, texts, app messages, emails, and fake invoices.

    Show sources