Odido Data Breach: 1 Million Records Leaked by ShinyHunters After Failed Extortion


Cybercriminals leaked over 1 million customer records from Dutch telco Odido after extortion failed. ShinyHunters claimed the attack. They dumped data in two waves on February 25 and 26, 2026. It hit 688,100 accounts with names, addresses, bank details, and IDs.

Odido confirmed the breach in an official notice on February 27. “We regret this incident. Not all records show full details, but some include passports, licenses, birth dates, and bank info,”

ShinyHunters first shared 1 million records with 317,000 unique emails. Day two brought another million, adding 371,000 emails. They demanded ransom. Odido refused. Data went public on BreachForums.

The leak packs high risks. Bank numbers enable fraud. Passports and licenses fuel ID theft. Internal notes aid phishing. Current and old customers suffer. Telecom data draws hackers for its richness.

Odido urges checks now. Monitor banks. Watch for fake calls or emails. Fraud alerts help. Change passwords. Add MFA.

Leaked Data Types

Data FieldRisk LevelNotes
Full names, addressesHighTargets for phishing
Phone, emailHighSpam, scams
Bank account numbersCriticalDirect fraud
DOB, passports, licensesCriticalID theft
Internal support notesMediumSocial engineering

Customer Action Steps

  • Visit haveibeenpwned.com to check exposure.
  • Scan bank statements daily.
  • Enable transaction alerts.
  • Place fraud freeze on credit.
  • Update all passwords from clean device.
  • Use unique passphrases per site.

Odido telecom breach, ShinyHunters leaks, and Dutch data exposure signal rising extortion trends. Protect against ID theft from Odido hack 2026.

FAQ

How many Odido records were leaked?

Over 2 million total, affecting 688,100 accounts with 688,000 unique emails.

What data did ShinyHunters expose?

Names, addresses, phones, emails, bank accounts, DOB, passports, licenses, notes.

Did Odido pay the ransom?

No. Leaks followed failed demands

How to check if I’m affected?

Search your email on HIBP.

What risks follow this breach?

Fraud, phishing, ID theft. Monitor finances closely.

Readers help support VPNCentral. We may get a commission if you buy through our links. Tooltip Icon

Read our disclosure page to find out how can you help VPNCentral sustain the editorial team Read more

User forum

0 messages