The investigation into the **Odido** data breach, which occurred in February, has taken a new turn as Dutch police confirm the likely involvement of domestic criminals. This development follows a complex inquiry into how attackers gained access to **Odido**'s systems and subsequently exfiltrated a vast amount of customer data. ### Social Engineering: The Initial Vector Authorities disclosed that a key component of the attack involved a Dutch-speaking individual impersonating an **Odido** IT employee. This individual reportedly contacted the company's customer service department, employing social engineering techniques to trick employees into granting unauthorized access to internal systems. This initial breach point, targeting a compromised customer contact system, allowed the hackers to download sensitive customer records. Despite the severity of the data exposure, **Odido** confirmed that its operational services remained uninterrupted throughout the incident. ### Ongoing Investigation and Public Appeal Dutch police are actively working to identify the caller and any other suspects involved. They have indicated that a recording of the caller's voice might be released publicly at a later stage if it aids the investigation. Shortly after the attack, police successfully took several servers offline that were being used by the hacker group to distribute the stolen data. In a statement, Dutch police emphasized the complexity of such investigations but also highlighted that cybercriminals inevitably leave traces. They believe that those responsible may have discussed the attack within their social circles or online communities, prompting an appeal for anyone with relevant information to come forward and assist in identifying the perpetrators. ### The Road Ahead The investigation is expected to continue for several more months. Police have stated that it is currently too early to predict the ultimate outcome, underscoring the diligent and time-consuming nature of cybercrime forensics.