Canada's Telus says attackers used stolen credentials to reach customer records over more than a year.
Investigators traced the Odido breach to local hackers after a Dutch-speaking caller impersonated an IT employee to gain access.