Odido Hack: Police Release Suspect's Voice, ShinyHunters Vow Legal Support — What It Means for Expats

If you are an Odido (formerly T-Mobile) customer living in the Netherlands, your personal data — name, address, bank details — may have been stolen in one of the country's largest-ever data breaches. And the hunt for the hacker behind the attack just took a dramatic turn.

On Monday, Dutch police played an audio recording of the suspect on the television programme Opsporing Verzocht (literally 'Investigation Requested', the Dutch equivalent of a police appeal show). The clip reveals how the hacker, speaking fluent Dutch, tricked an Odido employee into handing over login credentials through a convincing social-engineering phone call.

The hack in a nutshell

In February 2026, the hacking collective ShinyHunters claimed to have stolen the data of over 6.2 million Dutch residents from telecom provider Odido. The attack began with a phone call: a man impersonated an IT specialist from Odido's customer service department and persuaded an employee to log into a fake internal system. Once the employee entered her username and password on a spoofed login page, the hacker had access. Two days later, ShinyHunters emailed Odido demanding a ransom. The company refused to pay, and the hackers subsequently published a portion of the stolen data on the dark web.

Police appeal and ShinyHunters' response

After the police broadcast the audio, ShinyHunters confirmed to BNR that the voice belongs to one of their members. In a statement, the group said: “Our team member has our full support — emotionally, mentally, and financially. Everything has been arranged, including a criminal defence lawyer.” The collective also lashed out at Dutch law enforcement, calling them “a big joke” and threatening further attacks.

A police spokesperson declined to comment on the ongoing investigation, but emphasized they are continuing their search for the man. In July, police already urged the hacker to turn himself in — a request he ignored.

A second suspect: Dutch man arrested

Separately, RTL Nieuws reported that a 23-year-old Dutch man, Pepijn van der S., was arrested in late September for his alleged involvement with ShinyHunters. Van der S. was previously sentenced to four years in prison in 2023 for extortion, money laundering, and hacking companies. According to RTL, he worked for a cybersecurity firm by day while attacking the same kinds of businesses by night. It remains unclear whether he is the voice on the recording.

What this means for you as an international

If you have an Odido subscription or had one at the time of the breach, your data may be exposed. The stolen information reportedly includes names, addresses, phone numbers, and bank account numbers — details that could be used for identity theft or phishing scams.

What to do:

• Change your Odido account password immediately.
• Enable two-factor authentication on your account.
• Be extra vigilant for phishing emails or calls asking for personal details.
• If you suspect identity fraud, contact the Dutch police (0900-8844) and register with Fraudhelpdesk.

Odido has stated it will not pay any ransom, and the investigation is ongoing. For now, the police are asking anyone who recognizes the suspect's voice to come forward via the tip line (0800-6070).

Sources: NOS, NL Times, NOS/RTL