Odido hackers release more data; check if your email was stolen

The cyber crime group that hacked into the customer service database of telecoms firm Odido published more of the millions of lines of data it has stolen on Friday on the dark web.

Odido refused to pay a ransom for the information and the hacker group, known as Shinyhunters, is now publishing the info from millions of present and past customers online.

Odido says data relating to 6.2 million clients was stolen in the hack, while the hackers claim more than 10 million customers are involved.

The information published on Friday includes names, addresses, phone numbers, email addresses, bank account numbers and comments from customer service staff about particular clients. It also includes personal BSN numbers.

The website Have I Been Pwned, has now itemised the first two leaks, allowing clients to check if their email has been stolen.  Have I Been Pwned was set up by security researcher Troy Hunt in 2013 and according to broadcaster RTL, is a safe system to use.

The Dutch police offer a similar website, Check je Hack, RTL said.

The hackers have not yet published passport, driving licence and ID details and says this will be published later if Odido does not pay a ransom fee, said to be €1 million.

Odido said it had discussed what action to take with cybersecurity advisers and government officials. “Odido has decided not to negotiate with these criminals and not to be blackmailed by them,” the company said in a statement.

The hackers say they will continue to publish information over the next few days.