A massive data breach at Odido, a major Dutch telecom provider, has led authorities to suspect that Dutch nationals were behind the attack, which exposed sensitive information of over six million customers1. The breach occurred in February 2026, and an investigation revealed that a phishing attack was the likely entry point for the hackers. As a result, data from millions of customers was stolen and later made public, prompting a manhunt for those responsible. The Dutch police are now seeking public assistance in identifying the individuals involved in the cyberattack. The fact that local hackers may have been involved raises concerns about the vulnerability of critical infrastructure to insider threats. So what matters to practitioners is that this incident highlights the need for robust security measures to prevent phishing attacks and insider threats, which can have devastating consequences for organizations and their customers.