A breach of Odido (Netherlands) was added to Have I Been Pwned’s breach database on 26 February 2026. It affected 6,077,025 accounts. Exposed: Passport numbers, Driver’s license numbers, Government ID numbers, Financial account and card details, Email addresses and Phone numbers and more. The breach began on 12 February 2026, 14 days before it was reported.
Status
Confirmed breach
People affected
6,077,025 accounts
Reported
26 February 2026
Breach began
12 February 2026
Time to tell
14 days (the median in California’s notices over the last year: 154 days)
Look for Odido’s own notice or letter: it should say what of yours was involved. Keep it.
Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
Expect scams that use your details: calls, texts or emails pretending to be Odido, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.
Privacy Unpacked