Major Telco Breach: 6.2 Million Users Exposed
Dutch telecommunications company Odido has confirmed a cyberattack exposing personal data of 6.2 million customers, including names, dates of birth, and contact details from a customer contact system.
Article record
Why it matters
What this means for organisations holding critical data
Dutch telecommunications company Odido has confirmed a cyberattack exposing personal data of 6.2 million customers, including names, dates of birth, and contact details from a customer contact system.
What Happened
Dutch telecommunications company Odido, one of the Netherlands' largest mobile operators, has confirmed suffering a significant cyberattack that compromised personal data belonging to approximately 6.2 million customers. In a notice published on its website, the company said it "deeply regrets" the situation and is "fully committed" to limiting its impact.
What Data Was Exposed
According to Odido's investigation, the breach originated from a customer contact system. The compromised data includes personal information such as names, dates of birth, email addresses, and phone numbers. The company has confirmed that no passwords, call records, or billing information were involved in the incident.
Scale of the Breach
With 6.2 million users affected, this ranks among the larger European telecommunications breaches in recent memory. Odido is one of the major mobile network operators in the Netherlands, making the scale of this breach particularly concerning for Dutch consumers and the broader European data protection landscape.
Why This Matters
Even without passwords or financial data, the exposed information creates serious risks for affected individuals. Names combined with dates of birth, email addresses, and phone numbers provide everything needed for targeted phishing campaigns, identity fraud, and social engineering attacks. Criminals can use this data to craft highly convincing scam messages that reference real personal details.
The Bigger Picture
This breach is a stark reminder that cloud-connected systems remain a persistent target for attackers. Customer contact platforms, CRM tools, and support databases often hold vast quantities of personal data, yet they rarely receive the same security scrutiny as core billing or authentication systems. The result is a growing pattern of breaches where millions of records are exposed through what organisations consider secondary systems.
How Firevault Addresses This Risk
Firevault's Layer 1 physical air gap storage removes sensitive data from internet-connected infrastructure entirely. By storing critical personal records offline in secure, geographically distributed bunkers, organisations eliminate the attack surface that made this breach possible. Data that is not online simply cannot be reached by remote attackers, no matter how sophisticated their methods.
For telecommunications companies and any organisation handling millions of customer records, the question is no longer whether a breach will happen, but when. Physical isolation through air gap technology offers the only architecture where "when" becomes irrelevant.
How Firevault helps
- Offline Secure Storage keeps gold-copy data physically disconnected from the network, so a ransomware or exfiltration event cannot reach it.
- Control gives boards and operators a single view of what is online, what is isolated, and what is recoverable across the estate.
Talk to Firevault about Disconnect to Protect® for your organisation.
Sources
Where this reporting comes from
How Firevault would handle this
Physical disconnection removes the path an attacker needs
Offline Secure Storage® holds a clean copy of your data on hardware that is physically disconnected, so an intrusion cannot reach it, encrypt it or delete it.
Related Reading
You may also find these useful
Smith and Co Solicitors Ipswich Data Breach
An Ipswich solicitors firm with more than 2,000 clients has been hit by a data breach, with hackers gaining access to potentially sensitive data and persuading one individual to send them money after obtaining her email.
Shell investigates Cl0p data theft claim as engineering files are listed
Shell has opened an investigation after the Cl0p ransomware group claimed the theft of around 89 gigabytes of internal data, said to include engineering drawings, facility photographs, project roadmaps and testing reports. Shell is one of dozens of organisations named in the same campaign.
Ransomware surges while AI dominates the conversation
Ransomware attacks rose 20 per cent in July 2026 to 799 confirmed incidents, according to Comparitech data reported by The Register. Finance, technology, pharmaceuticals and education absorbed the sharpest increases while attention stayed fixed on artificial intelligence.
Gunra ransomware hits critical infrastructure via Fortinet flaws
CISA, the FBI, the NSA and partner agencies have warned that Gunra ransomware affiliates are exploiting known Fortinet authentication bypass flaws to reach critical infrastructure networks, then stealing and encrypting data.
AnMed Closes Facilities Following Ransomware Attack and Data Claims
South Carolina health system AnMed was forced to close 83 facilities following a cyberattack. Threat actors subsequently claimed to hold 6 terabytes of sensitive patient records.
US directive allows private firms to conduct offensive cyber operations
US President Donald Trump has signed a memorandum permitting private firms to execute offensive cyber operations. The move raises new risks of retaliatory attacks and collateral system disruptions.
Share this article
Major Telco Breach: 6.2 Million Users Exposed
Dutch telecommunications company Odido has confirmed a cyberattack exposing personal data of 6.2 million customers, including names, dates of birth, and contact details from a customer contact system.
