{ "type": "bundle", "id": "bundle--f7e989bc-1cb4-5c88-8452-5dc6bdfba6d7", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--6926b3b0-5ac6-5757-8551-57273b6949d9", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "org:7074e2c1-7d97-4ee0-a3b7-d5368112aa60", "name": "Ben", "identity_class": "organization" }, { "type": "identity", "spec_version": "2.1", "id": "identity--ff81319d-1254-5bc7-8bed-845ce326fd3d", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "org:14b2a26e-9885-4474-b5d1-965d9059e464", "name": "Odido", "identity_class": "organization" }, { "type": "incident", "spec_version": "2.1", "id": "incident--896e6ec5-cf35-508f-8e6e-6f87ecc5ccc8", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "inc:68eb461e-0d63-44de-8b3f-84eb4e532dee", "name": "February 2026 Odido customer-contact-system cyberattack" }, { "type": "incident", "spec_version": "2.1", "id": "incident--e3dfb873-0068-5271-8c84-88a71e760ca1", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "brh:c565faab-a1ee-40a9-830f-2b06e01abfb1", "name": "Odido and Ben customer-contact-system breach" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--15338451-aaed-5e84-82fb-6fc9ebe47320", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:fb41b183-f063-4a7f-b36b-49a0924eedbd", "relationship_type": "affected-organization", "source_ref": "incident--896e6ec5-cf35-508f-8e6e-6f87ecc5ccc8", "target_ref": "identity--ff81319d-1254-5bc7-8bed-845ce326fd3d", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://newsroom.odido.nl/en-us/odido-informs-customers-of-cyber-attack/", "external_id": "cit:7f60b97e-b54c-41f5-912c-a1b548f6454e", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:20150bfcbc64b8427a3ffd4a9c17cf882ae9784f8c1c078eb3b357982680f0bc" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--26468011-2507-5e25-8bef-74b57877051a", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:54086cb1-bcbd-4379-8630-9813353f7c0b", "relationship_type": "affected-organization", "source_ref": "incident--896e6ec5-cf35-508f-8e6e-6f87ecc5ccc8", "target_ref": "identity--6926b3b0-5ac6-5757-8551-57273b6949d9", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:ce2c68e1-8f49-444a-b9c3-d309ec4ba364", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--29e2dfcc-2fef-5c9c-84ec-97f0673864d1", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:431895cd-6356-499c-82b4-2d3ac481603d", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--f0ef8ee5-da79-5b9a-8282-ea8c20f91cfa", "target_ref": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:e2a09a69-d9e8-4b01-9a03-fa9c42700f1d", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3e770624-4a81-5127-89c7-082f69319b93", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:cba01c04-7f5b-4f49-a914-e273f2eb1cc1", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--f0ef8ee5-da79-5b9a-8282-ea8c20f91cfa", "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:fe8b046c-0c41-4fbe-801e-21a6521a47d8", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--441b8ede-2938-5d35-8a6d-5ab3ccd08539", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:ec41327f-9b9b-4832-8f6e-e6e905caf547", "relationship_type": "attributed-to", "source_ref": "incident--896e6ec5-cf35-508f-8e6e-6f87ecc5ccc8", "target_ref": "x-ally-threat-actor--9f8bab7d-064a-5954-85ba-00242cf94bac", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:bf1e25a0-668d-4f15-a542-6bf61c6c07cc", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50b2864f-4ff3-5951-81bc-c937bee3ed60", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:6fc02706-fc93-476e-a4b0-e0542ef22570", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--f0ef8ee5-da79-5b9a-8282-ea8c20f91cfa", "target_ref": "x-ally-data-category--8a4b38eb-4642-521b-8ce5-b7722d526458", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:dfe97f6a-cc70-41d1-8755-0e208f732823", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6cffb2f9-98f5-5f10-8cef-acc8c59f2970", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:d063211c-3c76-46ce-bf5c-4fb2e5d38452", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--f0ef8ee5-da79-5b9a-8282-ea8c20f91cfa", "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:0822a39a-f18c-4a06-96af-e8e953e5717f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--73bb684a-3bb2-5995-8279-a179dd3ac152", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:36d9a7e2-d1c6-43dc-a360-36a8b6a4e412", "relationship_type": "resulted-in", "source_ref": "incident--896e6ec5-cf35-508f-8e6e-6f87ecc5ccc8", "target_ref": "x-ally-notification--776083d1-21c7-5fa2-8852-9f68ab75a41a", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://newsroom.odido.nl/en-us/odido-informs-customers-of-cyber-attack/", "external_id": "cit:3780fd34-eed5-47e7-a896-780c33f3922b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:20150bfcbc64b8427a3ffd4a9c17cf882ae9784f8c1c078eb3b357982680f0bc" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8423c6dc-09d8-5a3f-8acc-aca0c44637cd", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:884178d7-2eb4-4f76-adfe-398391994e71", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--f0ef8ee5-da79-5b9a-8282-ea8c20f91cfa", "target_ref": "x-ally-data-category--05e2e501-a627-5fd9-8973-d3d458231f93", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:78164c86-ce8e-47d1-8e5f-e53bc92d8a8b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a4b59e66-a15f-5350-8df0-c7f6b29a63df", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:72434171-175c-4442-bea4-2d5872d27f6b", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--f0ef8ee5-da79-5b9a-8282-ea8c20f91cfa", "target_ref": "x-ally-data-category--7d2e510c-3773-582d-8952-ab532184f0b9", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:49b79859-ca21-4f0e-9289-12ca2ad581c6", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ab472206-0951-56ba-81fe-a3ef89f7bdbd", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:62ddc1dd-0c2c-4aef-9d56-369da5d5d61f", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--f0ef8ee5-da79-5b9a-8282-ea8c20f91cfa", "target_ref": "x-ally-data-category--a5875288-3af8-5021-801a-9ae62c23e6d2", "confidence": 95, "external_references": [ { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/Odido", "external_id": "cit:c5505f15-c9f4-4b51-b856-b66f92a2714f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2c8124366d33afe7c29d68596f8da83ca4bbb4ef24f7ae412c31fffebda10fc8" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--acd518fd-92c3-575e-8be0-1046d281cbd5", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:53d02fe4-b723-48fb-8355-ed10dc6fe544", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--f0ef8ee5-da79-5b9a-8282-ea8c20f91cfa", "target_ref": "x-ally-data-category--0e475596-55d5-5383-86b9-9e5074f2a0ed", "confidence": 95, "external_references": [ { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/Odido", "external_id": "cit:6a451d26-71fe-4684-9d87-3a74ed0aee0c", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2c8124366d33afe7c29d68596f8da83ca4bbb4ef24f7ae412c31fffebda10fc8" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b741e1be-7d0e-54b0-8b3f-d21cdb70e0f4", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:0df81302-b618-44c4-a45a-4bb638059c7a", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--f0ef8ee5-da79-5b9a-8282-ea8c20f91cfa", "target_ref": "x-ally-data-category--40ba6c78-b66b-5dcd-8ee9-5f2789f80585", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:d8ca98fe-1221-4c37-a301-b512765f9a1a", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b96ae274-627d-58d2-8a94-d02b6ea4f232", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:b71a144a-eddd-49fd-ae44-2b58c8b6ae65", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--f0ef8ee5-da79-5b9a-8282-ea8c20f91cfa", "target_ref": "x-ally-data-category--8d61e479-4403-5ccf-8301-fc8eecd71836", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:81e14044-3de5-4a4e-af95-76f117f97799", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--be1ea05c-0694-58a7-8437-a1239b12db59", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:775ba8f9-ae1d-4f4d-98f0-3eb7f657e669", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--f0ef8ee5-da79-5b9a-8282-ea8c20f91cfa", "target_ref": "x-ally-data-category--17289b0a-3ac5-513a-815f-ad1b9db697fe", "confidence": 95, "external_references": [ { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/Odido", "external_id": "cit:09c9306f-953c-4f04-8bb6-b02a4f31dc47", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2c8124366d33afe7c29d68596f8da83ca4bbb4ef24f7ae412c31fffebda10fc8" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cac0da4d-93cc-55ae-820b-ff0d6f056df7", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:a6332611-22de-41ce-b8bc-32387d778d8c", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--f0ef8ee5-da79-5b9a-8282-ea8c20f91cfa", "target_ref": "x-ally-data-category--52b3cbb9-715e-51b4-8264-46d4b1a49ec4", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:e00b37db-1d53-48bb-9274-bae94f831459", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d137ab72-3e47-5233-8a36-a4aef0163a31", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:f7355063-314e-408c-87cd-4ff33ff22dbe", "relationship_type": "resulted-in", "source_ref": "incident--896e6ec5-cf35-508f-8e6e-6f87ecc5ccc8", "target_ref": "x-ally-data-exposure--f0ef8ee5-da79-5b9a-8282-ea8c20f91cfa", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:f1d151fe-23cb-4cf1-9867-b5374743768e", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ] }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--04b239f8-f8d0-55c8-8b23-c41d2de3a3b1", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:d0570bd4-fe2b-4f57-bf01-1bf349ab127b", "confidence": 100, "external_references": [ { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/Odido", "external_id": "cit:d8ca1322-b2b5-4b10-9e98-dc1d213f8d6e", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2c8124366d33afe7c29d68596f8da83ca4bbb4ef24f7ae412c31fffebda10fc8" } ], "x_ally_claim_object": { "kind": "value", "datatype": "integer", "value": 6077025, "unit": "record" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--0ee8ef18-e15b-5ad9-8a94-fec5c02c8ace", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:63735c01-67e7-4fad-bdcd-6fe5b3a3e2be", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:635c03f8-657a-4412-855c-e7c847b15051", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Odido said it immediately detected the unauthorized access in both attacks, investigated, revoked the threat actor's access, and worked with external cybersecurity experts." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--1f5d5013-198b-5d47-8998-f6921790a88c", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:4525ff6e-53f6-4e28-ace3-9e20ab472225", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:6766b2bf-3eef-4d4b-822d-8659226f736c", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ], "x_ally_claim_object": { "kind": "value", "datatype": "integer", "value": 6390000, "unit": "individual", "approximate": true } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--2a46f9da-323b-5c6a-8d2a-0dae9dab5449", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:ddf6be73-1850-4ca4-b9c8-d0e284c4d078", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://newsroom.odido.nl/en-us/odido-informs-customers-of-cyber-attack/", "external_id": "cit:283b75ef-a375-441f-9471-817393792b8a", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:20150bfcbc64b8427a3ffd4a9c17cf882ae9784f8c1c078eb3b357982680f0bc" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-02-12" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--5a5af565-82ca-584f-8206-69fe3f56943a", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:1b6b727e-c133-480c-afcc-55e6d2bc2715", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:8805f7f1-4b0f-45ec-987a-ee54580c442e", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Odido said Simpel customers were not impacted by the cyberattack." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--6b009a0f-f7ac-5dd1-84c2-752c448480fb", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:b40c6302-d07b-4aab-b3de-07b4f89d753e", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:1b1bfa3c-1cc4-4d5e-991a-0867b6e33aff", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-02-05" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--78c45099-33cb-51c6-8f2c-eacc136a5e29", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:10e4ef95-a95e-4177-91d7-641e1167c61d", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://newsroom.odido.nl/en-us/odido-informs-customers-of-cyber-attack/", "external_id": "cit:7d6db074-95d2-435e-a7e8-03e0bb93185f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:20150bfcbc64b8427a3ffd4a9c17cf882ae9784f8c1c078eb3b357982680f0bc" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Odido's operational services remained available and were not affected by the cyberattack." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--7d8859bb-5e80-5e50-8545-4840d85c0a17", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:3b853b70-1a2b-4e69-b41c-6dbc127ec1b8", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:43cea00e-fd3a-4788-b3c6-b21629f6339c", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ], "x_ally_claim_object": { "kind": "iri", "value": "https://attack.mitre.org/techniques/T1566/004/" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--86db8060-76d4-5a42-8f0c-ad2a50a7e039", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:266a8c4e-6e2a-4aa2-bd44-16549ac42bc2", "confidence": 95, "external_references": [ { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/Odido", "external_id": "cit:e2b32f6e-a145-4fc4-a260-81a9ade395ad", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2c8124366d33afe7c29d68596f8da83ca4bbb4ef24f7ae412c31fffebda10fc8" }, { "source_name": "Politie Nederland", "url": "https://www.politie.nl/nieuws/2026/juli/8/onderzoek-naar-hack-odido-wijst-op-mogelijke-betrokkenheid-nederlanders.html", "external_id": "cit:f114c5d9-6c3b-488f-b826-5635ab055d47", "x_ally_stance": "qualifies", "x_ally_snapshot_id": "snp:sha256:8fc4c216a3aee613b2ebe36874b5b06b707055f21afb9157175e085fb92ee909" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "HIBP reported that approximately 6 million unique email addresses were published across four data releases on consecutive days; Dutch police separately said data stolen from more than six million customers was later made public." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--968d1efc-e00d-5703-8d66-9f1a698bc422", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:a1bfe48b-8276-4481-b262-0cc56365771f", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:4bfd84c7-6292-447f-8190-759ba4c5fff4", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Odido said the affected data did not include Mijn Odido or other login passwords, call details, location data, billing data, invoice data, or scans of identity documents." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--987c2208-698b-5775-8d1b-afa69a71224e", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:0d034348-b566-4dc1-8d21-df6265a8c426", "confidence": 85, "external_references": [ { "source_name": "Politie Nederland", "url": "https://www.politie.nl/nieuws/2026/juli/8/onderzoek-naar-hack-odido-wijst-op-mogelijke-betrokkenheid-nederlanders.html", "external_id": "cit:4e100968-74d6-4a05-b02f-a4f1158c2daa", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:8fc4c216a3aee613b2ebe36874b5b06b707055f21afb9157175e085fb92ee909" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Dutch police reported strong indications that Dutch criminals were involved, including a Dutch-speaking caller who impersonated an Odido IT employee shortly before the hack." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--98b20aa9-28cb-5378-81f3-f360c3aff2c3", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:f4eb7ebf-f3ec-40d3-af3e-ff7e19a04baf", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://newsroom.odido.nl/en-us/odido-informs-customers-of-cyber-attack/", "external_id": "cit:4b9cfeeb-67a3-4aad-b45c-97e08a04a1bf", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:20150bfcbc64b8427a3ffd4a9c17cf882ae9784f8c1c078eb3b357982680f0bc" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Odido reported the incident to the Dutch Authority for Personal Data." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--9a37e212-260e-5157-8727-129f00a5a8c3", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:9891216a-a911-44bd-abd3-c6a6e02e65bb", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:529aa28a-be91-40d1-958a-94a1523d29d0", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Odido said it contacted every customer it determined was affected by email or SMS, after initial and additional notifications." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--bce9c84b-4216-5e57-89e3-aa5225ee5dc4", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:0497fac9-e7d4-444b-b887-af7d1c9d72cd", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:ec52f87a-3075-4046-b596-bd69a898463e", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Odido said its data analysis for the customer notifications had concluded." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--d8f37e0e-c48a-54b9-8d92-6ddb731b7fdc", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:d00f0dc5-0cf4-4606-b1c2-f80bf1ec42e8", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:8e2ed3ab-7f7f-47da-8b67-acc50bb7b6a8", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Odido did not pay the ransom, citing guidance from authorities and acknowledging that stolen data could consequently be published." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--e17ad16d-79f3-5422-89d3-35f06df18331", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:1bda4178-269c-4894-ac7e-a18ca95f6174", "confidence": 100, "external_references": [ { "source_name": "Politie Nederland", "url": "https://www.politie.nl/nieuws/2026/juli/8/onderzoek-naar-hack-odido-wijst-op-mogelijke-betrokkenheid-nederlanders.html", "external_id": "cit:d38e9965-2150-4499-9989-070093ef3652", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:8fc4c216a3aee613b2ebe36874b5b06b707055f21afb9157175e085fb92ee909" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Dutch police said they took several servers used by the hacker group to distribute data offline during the early investigation." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--f6c0fad9-f93c-5296-847e-27ce1367735a", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "clm:e37d1fdb-7a82-4084-861e-53c5f335a0c0", "confidence": 100, "external_references": [ { "source_name": "Odido", "url": "https://www.odido.nl/veiligheid-eng", "external_id": "cit:fcfe31de-8ec9-4944-850b-1208d433c262", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3c16c0640d927cda867c8345ffc873cc34bf5b7a6ce426545d5829fd67ca06b4" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-02-06" } }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--05e2e501-a627-5fd9-8973-d3d458231f93", "created": "2026-08-09T01:12:00Z", "modified": "2026-08-09T01:12:00Z", "x_ally_original_id": "dat:7290ba39-bdce-4ff7-8087-56e370cd91c5", "name": "Account credentials" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--0e475596-55d5-5383-86b9-9e5074f2a0ed", "created": "2026-08-08T23:32:54Z", "modified": "2026-08-08T23:32:54Z", "x_ally_original_id": "dat:6dfe9275-03bf-4617-8a72-2c61a08bcffc", "name": "Driver's license numbers" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--17289b0a-3ac5-513a-815f-ad1b9db697fe", "created": "2026-08-09T05:30:00Z", "modified": "2026-08-09T05:30:00Z", "x_ally_original_id": "dat:adc7e333-0980-4e0d-b777-706561409692", "name": "Government-issued identifiers" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--40ba6c78-b66b-5dcd-8ee9-5f2789f80585", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "dat:41d26529-cba1-47c1-b528-25e4c18aedb2", "name": "Demographic information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--52b3cbb9-715e-51b4-8264-46d4b1a49ec4", "created": "2026-08-08T23:23:24Z", "modified": "2026-08-08T23:23:24Z", "x_ally_original_id": "dat:c73589f6-cdb1-4fc7-9675-e1ef42363ada", "name": "Financial account information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--7d2e510c-3773-582d-8952-ab532184f0b9", "created": "2026-08-09T04:22:59Z", "modified": "2026-08-09T04:22:59Z", "x_ally_original_id": "dat:9d056b6a-1e01-4355-a828-41d9aaa63c9c", "name": "Customer service records" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--8a4b38eb-4642-521b-8ce5-b7722d526458", "created": "2026-08-09T01:12:00Z", "modified": "2026-08-09T01:12:00Z", "x_ally_original_id": "dat:74c79a35-6d37-461e-b865-805c619d4231", "name": "Gender information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--8d61e479-4403-5ccf-8301-fc8eecd71836", "created": "2026-08-09T01:42:42Z", "modified": "2026-08-09T01:42:42Z", "x_ally_original_id": "dat:6f122c9e-026f-4348-b335-0d3f85f51dbc", "name": "Usernames and account identifiers" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0", "name": "Names" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--a5875288-3af8-5021-801a-9ae62c23e6d2", "created": "2026-08-08T23:32:54Z", "modified": "2026-08-08T23:32:54Z", "x_ally_original_id": "dat:f6504134-e597-4f8c-802b-087547d02511", "name": "Passport numbers" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9", "name": "Contact information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:ad54319a-bb47-40fb-be6c-7fd6e2aa1f68", "name": "Dates of birth" }, { "type": "x-ally-data-exposure", "spec_version": "2.1", "id": "x-ally-data-exposure--f0ef8ee5-da79-5b9a-8282-ea8c20f91cfa", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "exp:58498432-5180-4309-a676-d474e935093a", "name": "Odido and Ben customer-contact-system data exposure" }, { "type": "x-ally-notification", "spec_version": "2.1", "id": "x-ally-notification--776083d1-21c7-5fa2-8852-9f68ab75a41a", "created": "2026-08-09T08:09:02Z", "modified": "2026-08-09T08:09:02Z", "x_ally_original_id": "ntf:6a193ead-1ade-4fde-bb6f-9ee2a463e447", "name": "Odido affected-customer and authority notifications" }, { "type": "x-ally-threat-actor", "spec_version": "2.1", "id": "x-ally-threat-actor--9f8bab7d-064a-5954-85ba-00242cf94bac", "created": "2026-08-09T07:43:33Z", "modified": "2026-08-09T07:43:33Z", "x_ally_original_id": "act:207e0651-44ea-4e76-8773-7acae4d56d14", "name": "ShinyHunters" } ] }