Investigation Uncovers Local Ties
The Dutch National Police have announced strong evidence that hackers from the Netherlands were responsible for the February breach at telecommunications provider Odido. According to a police press release, investigators discovered a telephone conversation made to Odido customer service shortly before the attack. In that call, a Dutch-speaking individual impersonated an Odido IT employee, using phishing techniques to trick the company into enabling data theft. Stan Duijf, head of operations at the National Investigation and Interventions Unit, noted that while cyber investigations are often complex, criminals leave traces, and the team secured evidence at multiple points during the inquiry.
Scope and Impact of the Breach
Odido, one of the Netherlands’ largest telecom firms serving millions of mobile, broadband, and television customers, disclosed the breach on February 12. Attackers accessed its customer contact system on February 7 and downloaded personal data affecting 6.2 million users. Exposed information may include full names, addresses, phone numbers, email addresses, IBANs, dates of birth, and some identification document numbers. The company stated that call details, location data, billing records, and account passwords were not compromised. The extortion group ShinyHunters has claimed responsibility, posting an 88GB archive with over 15 million records on their dark web leak site. ShinyHunters is known for vishing campaigns targeting major platforms and has been linked to breaches at Google, Cisco, Snowflake customers, and over 100 organizations via an Oracle PeopleSoft zero-day exploit.
Source: BleepingComputer
