Hackers breach Odido customer information, 6.2 million at risk
Hackers succeeded in accessing private information from 6.2 million accounts belonging to the telecommunications company Odido, the company confirmed on Thursday. Ben, a subsidiary of Odido, also warned its customers that their data may have been stolen.
The information accessed includes full names, addresses, phone numbers, email addresses, bank account details, dates of birth, and passport or ID card numbers, according to Odido. The breach includes "personal information from the communication system of Odido customers" and does not include passwords, phone usage data, billing details, or scans of identification documents. The breach was discovered over the past weekend and the AP Privacy Authority was notified immediately.
Odido stated in a statement: "Unauthorized access to the system was terminated as quickly as possible." The company added that it has enlisted cybersecurity experts to implement additional security measures in response to this incident. NOS technology journalist Stan Holsen noted that the data obtained is "extremely interesting" to criminals and could be used, for example, to send fake payment claims for unpaid bills.
It is unclear whether all Odido customers are affected, and the company declined to comment on whether it is under pressure or being extorted by hackers, according to the tech site Tweakers.
Meanwhile, both Ben and Odido urged customers to be cautious of emails and text messages claiming to be from Odido or their bank or other institutions. Customers should particularly verify the phone numbers and email addresses of the senders.