Dutch Carrier Odido Discloses Data Breach Impacting 6 Million

"The incident, the company said in a notice, occurred on February 7-8 and involved unauthorized access to a customer contact system. Customers of both Odido and its subsidiary Ben were affected. During the attack, the hackers stole customer information such as names, addresses, phone numbers, email addresses, dates of birth, customer numbers, bank account numbers, and passport or driver's license numbers and validity."

"The mobile phone carrier said its services have not been impacted by the incident and that no passwords, call records, or invoice data were compromised in the attack. Odido said it immediately closed the attackers' access to its systems, implemented additional security measures, and notified the relevant authorities of the incident. The company is notifying the affected users directly, via email or phone, and urged customers to be wary of suspicious and unusual activities, such as phishing."

"Odido noted that it was not aware of the stolen information being published online, adding that it continues to monitor the web in collaboration with cybersecurity experts. "We cannot rule out that leaked data may be published or misused at some point. We advise all customers to remain very alert to unusual activities or contacts," the mobile phone carrier said."

Odido experienced a data breach on February 7-8 involving unauthorized access to a customer contact system. Roughly 6.2 million Odido and Ben customers may have been affected, though not all users were impacted. Stolen data included names, addresses, phone numbers, email addresses, dates of birth, customer numbers, bank account numbers, and passport or driver's license numbers and validity. Services were not affected and no passwords, call records, or invoice data were compromised. Odido closed attackers' access, implemented additional security measures, notified authorities, is notifying affected users directly, and is monitoring the web with cybersecurity experts while advising customers to watch for phishing or suspicious contacts.

Read at SecurityWeek