Odido

Data Breach

www.odido.nl

5,989,533

Records Exposed

Feb 2026

Date of Breach

Database

Breach Type

Nov 2026

Added to Database

About This Breach

In February 2026, Odido, the largest mobile telecommunications provider in the Netherlands (formerly T-Mobile Netherlands and Tele2, also operating the Ben brand), suffered a data breach after the extortion group ShinyHunters socially engineered access to a Salesforce customer-relationship system used by the company. The intrusion took place on 7-8 February 2026 and was disclosed by Odido on 12 February 2026 as affecting roughly 6.2 million current and former customers. The compromised data included customers' full names, dates of birth, gender, email addresses, phone numbers, residential addresses, bank account details (IBAN), and government-issued identity-document numbers (passport, driver's licence, European ID card and residence-permit numbers). After Odido refused to pay an extortion demand, ShinyHunters published the full dataset, an archive of more than 15 million exported records, via a breach-trading Telegram channel on 1 March 2026. Portal passwords were reported to have remained encrypted and are not present in this dataset.

Compromised Data Types

Email Address Phone Number First Name Last Name Birthday Gender

Country

Netherlands

Language

Dutch

What Should You Do?

Get Full Breach Details with LeakedSource Pro

Sign up for a LeakedSource Pro account to see exactly what data was exposed in this breach and get real-time notifications when your information appears in new breaches.

Watch for phishing emails targeting your inbox. Attackers may use your exposed email address to send convincing scam messages.
Be alert to smishing attacks (SMS phishing). Scammers may text you pretending to be banks or service providers.
Enable two-factor authentication (2FA) on all important accounts to add an extra layer of security.
Use a password manager to generate and store unique, strong passwords for every account.