
Odido Notifies Individual Victims of Data Leak, Ex-Customer Data Retained Longer Than Stated
Dutch telecom company Odido began notifying individual victims on March 13, 2026, that their data had been leaked. This follows an earlier breach, with reports indicating that Odido retained personal data of at least 44,000 former customers longer than stipulated in its terms and conditions. The Autoriteit Persoonsgegevens (AP) is investigating complaints regarding data security and retention practices.
Signal context
First seen: Mar 13, 2026
Last updated: Jun 25, 2026
Status: Public signal
Key points
- Individual notifications of data leak started on March 13, 2026.
- Odido retained personal data of at least 44,000 former customers longer than allowed.
- Autoriteit Persoonsgegevens (AP) is investigating the incident.
Signal analysis
BetaThis analysis groups the signal by industry, likely incident action and impacted security area. It helps compare this signal with other published signals without treating the labels as final determinations.
Sector: Information
Likely country: 🇳🇱 Netherlands
inferred from company domain
Watch process controls, misconfiguration and accidental disclosure paths.
- Source type: outside the affected organization
Impact area: Confidentiality
Likely asset: User or customer data
- 26 signals in the same sector
- 90 signals with the same likely impact area
- 1 signal linked to this organization/domain
External sources
Odido bewaarde data van ex-klanten langer dan in voorwaarden staat - Dutch IT Channelhttps://www.dutchitchannel.nl/news/727284/odido-bewaarde-data-van-ex-klanten-langer-dan-in-voorwaarden-staatPublic source from dutchitchannel.nl.
Waarom 'Check je hack' slechts 1 keer je e-mailadres opzoekt in de Odido-datasethttps://tweakers.net/reviews/14496/waarom-check-je-hack-slechts-1-keer-je-e-mailadres-opzoekt-in-de-odido-dataset.htmlPublic source from tweakers.net.
Related signals
Grouped by why the signal is relevant.
Jeveuxaider.gouv.fr Data Leak Affects 550,000 Accounts
The French government announced on June 16, 2026, that its volunteering platform, Jeveuxaider.gouv.fr, had been a victim of a personal data leak. Approximately 550,000 user accounts were affected by the incident.
Dutch hospitals restore digital access after cyberattack on ChipSoft
On June 12, 2026, reports indicated that Dutch hospitals were restoring digital access following a cyberattack on ChipSoft, a major healthcare software provider. The attack had previously caused patient files to become inaccessible at multiple locations, leading fifteen hospitals to preventively block all electronic patient information. This measure forced doctors to revert to paper records and oral transfers. While the incident was not a data leak in the traditional sense, it was a significant attack on the health infrastructure of the Netherlands, carried out through a single supplier serving numerous hospitals.
NIFTY Corporation Affected by KDDI Corporation Data Breach
NIFTY Corporation, a Japanese internet service provider, was impacted by a data breach originating from an email system provided by KDDI Corporation. Threat actors gained unauthorized access to this shared system by exploiting a vulnerability in third-party software. This led to the potential exposure of up to 14.2 million email addresses and passwords across all affected ISPs. NIFTY Corporation customers' email addresses and passwords may have been compromised.
BIGLOBE Inc. Affected by KDDI Corporation Data Breach
BIGLOBE Inc., a Japanese internet service provider, was impacted by a data breach originating from an email system provided by KDDI Corporation. Threat actors gained unauthorized access to this shared system by exploiting a vulnerability in third-party software. This led to the potential exposure of up to 14.2 million email addresses and passwords across all affected ISPs. BIGLOBE Inc. customers' email addresses and passwords may have been compromised.
STNet, Inc. Affected by KDDI Corporation Data Breach
STNet, Inc., a Japanese internet service provider, was impacted by a data breach originating from an email system provided by KDDI Corporation. Threat actors gained unauthorized access to this shared system by exploiting a vulnerability in third-party software. This led to the potential exposure of up to 14.2 million email addresses and passwords across all affected ISPs. STNet customers' email addresses and passwords may have been compromised.
KDDI Web Communications Customer Data Affected by KDDI Email System Breach
KDDI Web Communications, a subsidiary of KDDI, was impacted by the data breach in KDDI Corporation's email system, disclosed on June 28, 2026. The incident, caused by a third-party software vulnerability, led to the potential exposure of up to 14.2 million email addresses and passwords belonging to customers across six Japanese ISPs, including KDDI Web Communications.
