The ShinyHunters extortion group has claimed responsibility for a massive data breach at Odido (formerly T-Mobile Netherlands), allegedly impacting roughly 6.2 million customers.

Breakdown of the Breach

• The Incident: Odido detected unauthorized access to its customer contact systems on February 7, 2026, and officially disclosed the breach via its newsroom on February 12.
• Data Involved: Compromised info includes names, addresses, phone numbers, dates of birth, IBANs, and identification numbers from passports or driver’s licenses.
• Safe Data: According to the official Odido security update, passwords, call logs, and location data were not accessed.
• The Culprits: ShinyHunters is utilizing sophisticated voice phishing (vishing) to bypass security and infiltrate corporate Salesforce environments.

Who Should Be Worried?

The breach primarily targets private customers of Odido and Ben NL. If you are a customer, look for official notifications sent by the company. Business accounts and core infrastructure (like your actual internet connection) remain unaffected.

A Growing Trend

Odido joins a string of recent high-profile victims. ShinyHunters has also targeted Panera Bread (5.1 million records) and Canada Goose (600,000 records) in this same campaign.