Odido

Acerca de esta filtración

In February 2026, Odido, the largest mobile telecommunications provider in the Netherlands (formerly T-Mobile Netherlands and Tele2, also operating the Ben brand), suffered a data breach after the extortion group ShinyHunters socially engineered access to a Salesforce customer-relationship system used by the company. The intrusion took place on 7-8 February 2026 and was disclosed by Odido on 12 February 2026 as affecting roughly 6.2 million current and former customers. The compromised data included customers' full names, dates of birth, gender, email addresses, phone numbers, residential addresses, bank account details (IBAN), and government-issued identity-document numbers (passport, driver's licence, European ID card and residence-permit numbers). After Odido refused to pay an extortion demand, ShinyHunters published the full dataset, an archive of more than 15 million exported records, via a breach-trading Telegram channel on 1 March 2026. Portal passwords were reported to have remained encrypted and are not present in this dataset.