Police Threaten to Release Hacker’s Voice After Massive 6.2 Million-Record Data Breach

Dutch Police May Release Suspect’s Voice in Hunt for Hacker Behind Massive Odido Data Breach

• Police May Release Hacker’s Voice After Massive 6.2 Million-Record Data Breach
• Fake IT Call Leads to One of Europe’s Biggest Telecom Hacks
• Dutch Police Close In on Suspect Behind Massive Odido Cyberattack
• Millions Exposed as Police Hunt Hacker Using Voice Recording
• Hacker Who Fooled IT Staff Could Be Identified by His Own Voice
• Police Say One Phone Call Triggered Massive Telecom Data Breach

Dutch police have taken an unusual step in the investigation into one of the country’s largest-ever data breaches, warning they may publicly release a suspect’s voice recording unless the individual comes forward.

Authorities say the recording belongs to a Dutch-speaking man who allegedly posed as an IT employee during a social engineering attack that helped cybercriminals breach telecom giant Odido’s systems. Investigators believe the call played a critical role in the cyberattack that exposed the personal data of more than 6.2 million customers.

Fake IT Call Opened the Door to a Massive Hack

According to the Dutch National Police, the suspect contacted Odido’s customer service shortly before the February cyberattack, pretending to be a member of the company’s IT department.

Investigators say the deception tricked employees into granting access to internal systems, allowing hackers linked to the ShinyHunters cybercrime group to steal millions of customer records. The stolen information was later leaked online after an alleged ransom demand was rejected.

Police Say They Have Strong Leads

The investigation has uncovered what officials describe as “strong indications” that Dutch nationals were involved in the operation.

Police are urging the caller to voluntarily identify himself, warning that if he refuses, investigators could release the recording publicly in hopes that someone recognizes the voice.

Authorities also believe people within cybercrime circles may know the suspect’s identity and are appealing for anyone with relevant information to come forward.

One of Europe’s Biggest Telecom Data Breaches

The Odido cyberattack ranks among the largest private-sector data breaches in Dutch history.

Hackers reportedly accessed a customer contact system and stole names, phone numbers, email addresses, physical addresses, account information, and other personal data belonging to millions of customers. Security experts warned that the leaked information could be used in phishing campaigns, identity theft, and financial fraud.

Investigators have already seized several servers allegedly used to distribute the stolen data, but officials say the investigation is expected to continue for several more months as authorities work to identify everyone involved.

Why the Investigation Matters

Cybersecurity experts say the case highlights the growing threat of voice phishing, also known as vishing, where attackers impersonate trusted employees over the phone to bypass security controls instead of exploiting technical vulnerabilities.

As organizations strengthen their digital defenses, cybercriminals are increasingly targeting people rather than systems, making employee awareness and identity verification critical layers of cybersecurity.

The Odido investigation also demonstrates how traditional detective work—including voice recordings, digital forensics, and seized infrastructure—can help authorities trace sophisticated cybercriminals who often believe they can operate anonymously online.