Class-action suit started against Odido over data leak affecting 6.2 million Dutch
The privacy foundation Consumers United in Court (CUIC) is launching a class-action lawsuit against telecom provider Odido over the massive data leak in early February. Hackers stole the data of a massive 6.2 million Dutch people. Victims can join the case free of charge from today.
The hackers stole names, home addresses, telephone numbers, bank account numbers, and identity document numbers of over 6 million current and former customers of Odido and its subsidiary Ben. They eventually published the stolen data on the dark web after Odido refused to pay a ransom.
The hack also revealed that Odido keeps customer data for much longer than it claims. People who canceled their Odido contracts up to a decade ago were also informed that their data had been stolen in the hack.
Those whose data was leaked can become victims of various phishing scams, Hilde Laffeber of CUIC told RTL Nieuws. “The mere fear that something like this could happen is already damage,” she said. According to her, this is the first mass claim against Odido over the hack.
Specifically, CUIC wants Odido to send a message to all affected Dutch explaining how the leak occurred, how Odido responded, and what they failed to do that allowed the hack to happen. The foundation is hoping for more clarity regarding exactly which data ended up on the street. That will make it easier to determine the extent of the damage, Leffeber said.
According to CUIC, Odido was negligent on several points. “For instance, far too much data was stored for far too long a period. The sheer volume of data stolen alone shows that the data was not properly protected. Odido was also insufficiently transparent and did not properly adhere to the reporting obligations.”
This class action lawsuit is happening on a no-cure, no-pay basis. That means that victims who wish to join the case pay nothing in advance, but must surrender a portion of possible compensation to the company financing the claim. The amount depends on how long the case lasts and how much is paid out, Laffeber told the broadcaster.
