Overview
- ShinyHunters released roughly 1 million Odido records for a second straight day, with a third leak signaled for February 28 and a stated plan to escalate to 2 million per day.
- Have I Been Pwned counted 317,000 unique emails in the first tranche and 371,000 in the second, alongside bank details, personal identifiers and customer service notes.
- Odido says operational services and account credentials were not affected and reports that scans of identity documents were not accessed.
- The telecom refuses to negotiate, and Dutch national police advise victims not to pay as they investigate the breach and warn that criminals may not delete data even if paid.
- Odido estimates about 6.2 million customers are affected, while ShinyHunters claims roughly 21 million records; the company says the attackers have begun leaking data on the dark web and has offered a 24‑month F‑Secure subscription to customers.