Privacy foundation Consumers United in Court (CUIC) launched class action lawsuits against Odido on Monday. The move follows a recent leak that exposed the data of more than six million people in the Netherlands. The collective accuses Odido of several forms of negligence and seeks redress for everyone whose information is now public.
CUIC says Odido kept too much data and stored it for too long. It also argues that the company failed to protect that data properly. The organisation adds that Odido did not act transparently and did not meet its reporting obligations. CUIC chair Eliëtte Vaal said the company seemed to treat customer‑data security “as the final step in its business operations”.
Earlier this year, the hacker group ShinyHunters stole the personal data of at least 6.2 million accounts and demanded a ransom. Odido refused to pay. Several investigations into the leak continue, including one by the Dutch Data Protection Authority.
CUIC describes itself as an independent non-profit organisation co‑founded by the Dutch foundation Privacy First and the European organisation None of Your Business. Both groups work “for concrete data protection of citizens, with significant implications for legislation, implementation, and supervision”.
@ANP | News Brainport

