Odido Telecom Reports Customer Data Breach Following Cyberattack

Dutch telecommunications group Odido has reported a cyberattack that compromised customer data, although its services remain operational.
In a statement released on Thursday, the mobile network—owned by buyout firms Apax Partners and Warburg Pincus—confirmed that it acted swiftly to contain the incident and has reported the breach to the Authority for Personal Data. Importantly, the company noted that sensitive information such as passwords, call records, and invoice data were not among the data that was stolen.
Odido plans to notify affected customers within 48 hours, citing the large volume of individuals impacted. However, the company did not disclose the exact number of customers whose information was involved in the breach.
Recently, Odido postponed its plans for an initial public offering in Amsterdam, following a lukewarm response from investors amid ongoing market volatility, as reported by Reuters. The telecommunications group serves approximately 8 million customers, according to Apax Partners.
Mobile data is a lucrative target for cybercriminals and nation-state spies, given the wealth of personal information stored within telecommunications firms. Data such as text message and call metadata, location information, and customer billing details can provide attackers with insights into an individual’s life and financial situation.
On February 5, the European Commission disclosed that a cyberattack may have compromised its central mobile infrastructure, potentially allowing hackers to access names and mobile numbers of some staff members. The Commission emphasized its commitment to enhancing the EU’s cybersecurity resilience and capabilities in light of the increasing frequency of cyber and hybrid attacks on essential services and democratic institutions.
While both incidents highlight the growing threat of cyberattacks, there has been no public indication that the Odido breach and the European Commission incident are connected.
Photograph: Odido offices in The Hague, Netherlands. Photo credit: Jeroen Jumelet/AFP/Getty Images
Copyright 2026 Bloomberg.
Topics
Cyber
Interested in Cyber?
Get automatic alerts for this topic.

Dutch telecommunications group Odido has reported a cyberattack that compromised customer data, although its services remain operational.
In a statement released on Thursday, the mobile network—owned by buyout firms Apax Partners and Warburg Pincus—confirmed that it acted swiftly to contain the incident and has reported the breach to the Authority for Personal Data. Importantly, the company noted that sensitive information such as passwords, call records, and invoice data were not among the data that was stolen.
Odido plans to notify affected customers within 48 hours, citing the large volume of individuals impacted. However, the company did not disclose the exact number of customers whose information was involved in the breach.
Recently, Odido postponed its plans for an initial public offering in Amsterdam, following a lukewarm response from investors amid ongoing market volatility, as reported by Reuters. The telecommunications group serves approximately 8 million customers, according to Apax Partners.
Mobile data is a lucrative target for cybercriminals and nation-state spies, given the wealth of personal information stored within telecommunications firms. Data such as text message and call metadata, location information, and customer billing details can provide attackers with insights into an individual’s life and financial situation.
On February 5, the European Commission disclosed that a cyberattack may have compromised its central mobile infrastructure, potentially allowing hackers to access names and mobile numbers of some staff members. The Commission emphasized its commitment to enhancing the EU’s cybersecurity resilience and capabilities in light of the increasing frequency of cyber and hybrid attacks on essential services and democratic institutions.
While both incidents highlight the growing threat of cyberattacks, there has been no public indication that the Odido breach and the European Commission incident are connected.
Photograph: Odido offices in The Hague, Netherlands. Photo credit: Jeroen Jumelet/AFP/Getty Images
Copyright 2026 Bloomberg.
Topics
Cyber
Interested in Cyber?
Get automatic alerts for this topic.
