Recent Data Leaks
Live
← Back to timeline

Odido

Have I Been PwnedConfirmed breachAdded February 26, 2026Occurred February 12, 20266,077,025 accountsodido.nlAll Odido breaches →
What was exposed
Bank account numbersCustomer service recordsDates of birthDriver's licensesEmail addressesGendersGovernment issued IDsNamesPassport numbersPhone numbersPhysical addresses
What to do if you were affected
Details
In February 2026, Dutch telco Odido was the victim of a data breach and subsequent extortion attempt . Shortly after, a total of 6M unique email addresses were published across four separate data releases over consecutive days. The exposed data includes names, physical addresses, phone numbers, bank account numbers, dates of birth, customer service notes and passport, driver’s licence and European national ID numbers. Odido has published a disclosure notice including an FAQ to support affected customers.
Frequently asked questions

What is the Odido data breach?

In February 2026, Dutch telco Odido was the victim of a data breach and subsequent extortion attempt . Shortly after, a total of 6M unique email addresses were published across four separate data releases over consecutive days. The exposed data includes...

When did the data breach happen?

This data breach occurred around February 2026.

How many accounts were affected?

Around 6,077,025 accounts were affected.

What information was exposed?

Exposed data included Bank account numbers, Customer service records, Dates of birth, Driver's licenses, Email addresses, Genders, Government issued IDs and Names.

What should I do if I was affected?

Watch your card and bank statements for unfamiliar charges, and consider requesting a new card number. Place a fraud alert or credit freeze with the major credit bureaus to block new accounts opened in your name. Expect more phishing and spam at this address. Treat messages that reference this company with extra caution. Watch for text-message phishing and SIM-swap attempts on your phone number. Be wary of targeted scams that use your personal details to sound convincing.

View on source ↗
Related breaches