New breach: 1M records from Dutch telco Odido have been published following a data breach, exposing 317k unique email addresses along with names, physical addresses, phone numbers and bank account numbers. 58% were already in @haveibeenpwned. More: https://haveibeenpwned.com/Breach/Odido
Have I Been Pwned: Odido Data Breach

In February 2026, Dutch telco Odido was the victim of a data breach and subsequent extortion attempt. Following the incident, 1M records containing 317k unique email addresses were published, with the attackers threatening to leak additional data in the following days. That threat was subsequently carried out, with a further 1M records containing an additional 371k unique email addresses released the next day. The exposed data included names, physical addresses, phone numbers, bank account numbers and notes about customers left by service operators. Odido has published a disclosure notice detailing the extent of the incident and advising that impacted data may also include dates of birth and passport and driver’s licence numbers.

Have I Been Pwned
Updated breach: Attackers have released another 1M records from Dutch telco Odido, adding 371k more unique email addresses to the breach. The data is consistent with the first dump, with further releases threatened. More: https://haveibeenpwned.com/Breach/Odido
Have I Been Pwned: Odido Data Breach

In February 2026, Dutch telco Odido was the victim of a data breach and subsequent extortion attempt. Following the incident, 1M records containing 317k unique email addresses were published, with the attackers threatening to leak additional data in the following days. That threat was subsequently carried out, with a further 1M records containing an additional 371k unique email addresses released the next day. The exposed data included names, physical addresses, phone numbers, bank account numbers and notes about customers left by service operators. Odido has published a disclosure notice detailing the extent of the incident and advising that impacted data may also include dates of birth and passport and driver’s licence numbers.

Have I Been Pwned
Updated breach: A further 833k unique email addresses from Dutch telco Odido have been released, bringing the total to 1.5M. The latest dump also includes passport, driver’s licence and European national ID numbers. More: https://haveibeenpwned.com/Breach/Odido
Have I Been Pwned: Odido Data Breach

In February 2026, Dutch telco Odido was the victim of a data breach and subsequent extortion attempt. Following the incident, 1M records containing 317k unique email addresses were published, with the attackers threatening to leak additional data in the following days. That threat was subsequently carried out, with a further 1M records containing an additional 371k unique email addresses released the next day. The exposed data included names, physical addresses, phone numbers, bank account numbers and notes about customers left by service operators. Odido has published a disclosure notice detailing the extent of the incident and advising that impacted data may also include dates of birth and passport and driver’s licence numbers.

Have I Been Pwned
Updated breach: Allegedly the final release, a further 4.6M unique email addresses from Dutch telco Odido were published today. The total now stands at 6.1M unique addresses across four separate releases. More: https://haveibeenpwned.com/Breach/Odido
Have I Been Pwned: Odido Data Breach

In February 2026, Dutch telco Odido was the victim of a data breach and subsequent extortion attempt. Following the incident, 1M records containing 317k unique email addresses were published, with the attackers threatening to leak additional data in the following days. That threat was subsequently carried out, with a further 1M records containing an additional 371k unique email addresses released the next day. The exposed data included names, physical addresses, phone numbers, bank account numbers and notes about customers left by service operators. Odido has published a disclosure notice detailing the extent of the incident and advising that impacted data may also include dates of birth and passport and driver’s licence numbers.

Have I Been Pwned

"The latest dump also includes passport, driver’s licence and European national ID numbers."

Why the fuck does Odido store this stuff?

Verify indentification, and delete the data, ASAP. That's how telecom providers should work. There's zero reason to keep this kind of information on your systems.

@haveibeenpwned in a Dutch news report its stated that most records leaked today are without a mail address.
Is this true and if so, are there other fields to base a search on?