Back to Radar
OD

Odido

High

In 2026, Odido faced a breach exposing over 6M user records, including sensitive PII.

Records exposed
6,077,025 records
Breach date
Breach Feb 12, 2026
Last update
Updated Mar 1, 2026

What data was exposed?

Fields reported as compromised in this breach record.

Bank account numbersCustomer service commentsDates of birthDriver's licensesEmail addressesGendersGovernment issued IDsNamesPassport numbersPhone numbersPhysical addresses

Why does this breach matter?

In-depth analysis of the breach and its implications.

In February 2026, the Dutch telecommunications company Odido experienced a data breach, involving the unauthorized exposure of sensitive information. Shortly thereafter, over six million records were released publicly across multiple data disclosures. Exposed data encompassed a wide range of personally identifiable information (PII), such as full names, contact details, government-issued identification numbers, and financial details. Odido initiated responsive measures, including releasing a public notification and FAQ to assist affected individuals.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Users face identity theft risks due to exposure of comprehensive PII, including financial and identification information.
Business Impact
Odido dealt with reputational damage, potential regulatory scrutiny, and operational disruption during incident response.
Affected Sectors
  • Telecommunications
Geographic Impact
  • Netherlands

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Monitor financial accounts and report unauthorized transactions.
  • Update passwords for accounts linked to breached email addresses.
  • Consider credit monitoring services.
  • Be cautious of phishing attempts using exposed data.

Preventive Measures

  • Implement multi-factor authentication for online accounts.
  • Limit the sharing of sensitive information without necessity.
  • Stay aware of potential phishing or impersonation attempts informed by disclosed data.
  • Regularly review digital security practices.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Sensitive PII such as names, addresses, government IDs, and bank account numbers were compromised.