Odido cyberattack hits 6M accounts

Dutch operator Odido says a cyberattack exposed personal data tied to more than 6 million customer accounts, making it one of the largest telecoms data breaches recorded in the Netherlands. The company, formerly T-Mobile Netherlands, detected signs of the intrusion on 7 February and brought in internal and external security experts. It says it has cut off the unauthorised access.

The attackers accessed data from a customer contact system, not the core network. Exposed information includes names, phone numbers, email addresses, bank account numbers, dates of birth and passport numbers. Odido states that passwords, call records, billing information and core services were not affected, and that mobile, internet and TV services remain safe to use. The operator has started notifying affected customers, a process it says could take up to 48 hours, and has reported the breach to the Dutch Data Protection Authority. Odido serves about 8 million customers in the Netherlands, competing with KPN and VodafoneZiggo.