Drooid Logo
Back to story perspectives

Full Breakdown

Odido Faces Ransom Demand from Shinyhunters After Major Data Breach

2/25/2026, 5:55:48 AM

Cyberattack Overview

The Dutch telecom provider Odido is currently facing a significant cybersecurity crisis following a data breach that has reportedly compromised the personal information of 8 million individuals, as claimed by the cybercriminal group Shinyhunters. The hackers have demanded a ransom exceeding €1 million, threatening to release the stolen data on the dark web if their demands are not met by Thursday morning. Odido, however, has stated that the breach affects 6.2 million current and former customers, with the stolen data including names, addresses, bank account numbers, and passport numbers.

Details of the Breach

Shinyhunters has provided evidence of the hack, asserting that the data breach includes a total of 21 million lines of information. The group claims to have accessed customer service accounts through phishing techniques, allowing them to obtain sensitive information. Odido has confirmed that while names, account numbers, and addresses were compromised, no passwords, call logs, or billing information were involved in the breach.

Company Response and Dilemma

Odido has not publicly disclosed its strategy regarding the ransom demand. Cybersecurity expert Rolf van Wegberg from TU Delft noted that the company faces a complex decision: to pay the ransom or refuse. He emphasized that if Odido chooses not to pay, Shinyhunters may escalate their tactics, potentially releasing portions of the data or increasing the ransom amount. Van Wegberg highlighted the serious implications of the breach, stating that the leaked data could facilitate phishing attacks and other criminal activities.

Customer Impact and Reactions

In response to the breach, Odido is offering affected customers a free two-year security package aimed at providing additional protection against potential identity theft. Reports have emerged from the Identity Fraud Reporting Center, where some individuals have expressed concerns about their data being exploited, while others claim to have already experienced misuse of their information.

Criticism & Opposition

Critics argue that Odido's handling of the situation may not be sufficient to protect customers adequately. The breach's scale and the sensitive nature of the stolen data have raised alarms about the company's cybersecurity measures and its responsibility to safeguard customer information.

Verbatim Quotes

  • “Make the right decision, you know where to find us.” — Shinyhunters
  • “It’s an extremely complex decision, morally very difficult, and the company also bears responsibility toward its customers.” — Rolf van Wegberg, Associate Professor at TU Delft
  • “The leak contains not just names and email addresses, but also passport and bank account numbers, something rarely seen in a single breach.” — Rolf van Wegberg

What's Next

As the deadline for the ransom approaches, Odido's next steps remain uncertain. The company is likely consulting with cybersecurity specialists to navigate this crisis. The outcome of this situation could have lasting implications for both Odido and its customers, particularly regarding data security and trust in the telecom provider.