26 Mar, 12:38··

Odido Data Retention Under Investigation After Security Breach

RTL Nieuws

A recent cyberattack targeting telecommunications provider Odido has prompted a full-scale investigation by Dutch authorities. The Autoriteit Persoonsgegevens (AP) and the Digital Infrastructure Inspectorate (RDI) are examining the company’s data storage practices and security measures following the theft of millions of customer records. This incident highlights growing concerns about data privacy and security within the Dutch telecommunications industry.

The hack, orchestrated by the notorious group ShinyHunters, resulted in the exposure of sensitive customer data, including names, addresses, and potentially financial information. Following the attack, the AP is specifically scrutinizing Odido’s data retention policies, determining if the company was storing customer information for an unnecessarily long period. Furthermore, the Digital Infrastructure Inspectorate is evaluating the technical safeguards implemented by Odido to protect its customer system, looking for vulnerabilities that were exploited. This investigation comes at a critical time, as data breaches are becoming increasingly common and sophisticated, demanding heightened vigilance and robust security protocols from telecommunications companies. The outcome of this investigation could set a precedent for data protection standards across the entire Dutch telecommunications sector.

Summarized from the sources above. Read the originals for the full story.

Highlights

Odido Data Storage Investigation

The Dutch Authority for Personal Data Protection is investigating whether Odido stored customer data for an excessive period following a cyberattack.

Hack and Data Breach

A cyberattack by ShinyHunters resulted in the theft of millions of customer records from Odido, prompting a thorough investigation.

Security Measures Under Scrutiny

The investigation focuses on assessing Odido’s security measures for its customer system and data protection practices.

Prolonged Data Retention Concerns

Authorities are examining whether Odido inappropriately retained customer data, potentially violating privacy regulations.

Multi-Agency Investigation Launched

The AP and Digital Infrastructure Inspectorate (RDI) are collaborating to investigate the incident and its implications.

data privacytelecommunicationsregulationsecuritytelecom