Odido has individually notified several victims of the recent cyberattack about the stolen data.
Dutch telecom provider Odido has, for the first time, individually notified a portion of its victims regarding the leaked data. The provider was hit by a cyberattack in late February, about which the company had already been warned by Salesforce. The cyberattack affected more than 6.2 million customers.
Customers are being kept up to date via the information page, but individual contact with victims whose data was leaked is now taking place for the first time. It is not yet clear when all affected customers will be personally notified.
Some victims informed
“As the investigation progresses, we are getting an increasingly clear picture of which customers may have been affected,” Odido states on its support page. “Based on the current state of affairs, we have informed a group of customers about new findings regarding the cyberattack.” It is not yet clear exactly how many customers belong to that ‘group’.
Furthermore, there has been significant criticism regarding how Odido handled the aftermath of the cyberattack. For instance, immediately after the attack, customers received a generic email about the data breach without knowing exactly if or how they were affected.
In addition, the data breach could potentially have been prevented. The hacker group has been active for some time and has been able to attack various companies via the Salesforce environment since last summer. A few days before the attack on Odido, Salesforce warned the telecom provider about this hacking method.