Overview
- The Odido hack in early February resulted in the theft and public release of personal data for more than six million customers.
- Investigators from the Public Prosecution Service's Team High Tech Crime say they have strong indications that Dutch criminals were involved based on a recorded customer-service call in which a Dutch-speaking person posed as an Odido IT employee.
- Audio experts examined the full recorded call and found no signs of AI alteration, and police have already taken multiple attacker servers offline and secured digital traces for forensic analysis.
- Authorities are urgently seeking tips, have asked the unidentified caller to come forward, and provided a police tip line (0900-8844) plus an anonymous reporting route while warning the probe will take months.
- Phone-based social engineering, where callers impersonate staff to bypass technical controls, is a common vector that can defeat safeguards and leaves call recordings as crucial evidence for tracing perpetrators.