Odido Data Breach: Phishing Alert & What You Need to Know

Odido has fallen victim to a major cyber attack. Data from millions of customers is on the street and is therefore in the hands of hackers and other malicious parties. In short: phishing that you know is coming!

Banks, online services, WeTransfer, housing network, Vattenfall, tax authorities, McAfee, Rabo, ABN AMRO, Apple, Chamber of Commerce, Trade Register, Government, DigiD, Netflix, BOL.com, Zilveren Kruis, Vewin, cloud storage, telephone providers, Facebook, credit cards, Interpol, PostNL, WhatsApp, the Netherlands Enterprise Agency, SMS, MijnOverheid, Facebook… no company, service or institution escapes attempts by criminals to defraud customers of (a lot of) money.

Part 63. Odido

On Thursday, customers of telecom provider Odido received an ominous email:

‘You are receiving this email because we want to warn you as a precaution about possible risks as a result of a cyber attack at Odido.’

It goes without saying that Odido ‘greatly regrets this situation’ and is working with external cybersecurity experts to respond adequately.

In the email, Odido already warns that phishing is coming. So:

‘Be extra alert for suspicious activities. Unfortunately, cyber incidents such as these are becoming increasingly common and no organization is immune. Not every data breach leads to actual misuse, but we cannot rule out the possibility of misuse of your data.’

Odido also comes with some hints:

We previously wrote about the following phishing attempts:

1. Corona-phishing
2. Woningnet-phishing
3. ING-phishing
4. Rabo and SNS fake email
5. KvK-phishing
6. PostNL-phishing
7. WeTransfer-phishing
8. DigiD-phishing
9. ICS/creditcard-phishing
10. MijnOverheid (Energy Surcharge) phishing
11. Mail account (limit exceeded)
12. iCloud-phishing: ‘gratis’ 50 GB
13. WeTransfer-phishing (II)
14. Credit Card-phishing (II)
15. T-Mobile phishing
16. Netflix-phishing
17. Trade register check? No, phishing!
18. ERecognition warning? No: online fraud!
19. In the crosshairs of Interpol? No: Scam!
20. Bunq
21. McAfee©-Phishing
22. BOL.com
23. Waterfall
24. Tax authorities phishing
25. Facebook
26. SHARE (II)
27. MyGovernment (QR-code)
28. Cloud storage
29. FedEx
30. ICS-sms
31. Bunq II
32. Mail password
33. BOL.com (II)
34. Tax authorities (II)
35. Ziggo
36. Tax authorities (III)
37. Netflix (II)
38. ANWB
39. Home insulation
40. Googthe
41. PostNL (II)
42. WhatsApp
43. Credit Card (III)
44. National government: Emergency package
45. KvK (II)
46. DigiD (II)
47. MyGovernment (III)
48. MyGovernment (IV)
49. SHARE (III)
50. MyGovernment (V)
51. WhatsApp / SMS (II)
52. PostNL-sms (III)
53. Rabo (IV) & Silver Cross
54. SIM card
55. YOU
56. ABN AMRO
57. Vewin
58. Netherlands Enterprise Agency
59. Cloud-phishing (III)
60. Network management
61. Facebook
62. ABN AMRO
63. Odido

How do you recognize phishing? The message contains a threat (account closed or suspended, a fine or assessment) or reward (price, discount, money back) and usually asks for a quick response (last warning, within 24 hours). Spelling and style are flawed. The sender (address) does not match the domain name of the so-called sender. The email (or text message) contains the request to check or update personal data. The links in the email (made visible by hovering the mouse over them) often refer to strange websites and domains (so do not click), a shortened link (bit.ly) is also suspicious.

By Di-Lan Sun. Info from mail Odido.