RDI fines Odido €1.5M over wiretap security failures

The Dutch Authority for Digital Infrastructure has fined internet service provider Odido €1.52 million after discovering major lapses in the security of its wiretapping system

The Dutch Authority for Digital Infrastructure has fined internet service provider Odido €1.52 million after discovering major lapses in the security of its wiretapping system, according to Cybernews.

Following investigations conducted between 2021 and 2022, the RDI found that Odido lacked a mandatory security plan, failed to properly screen staff with access to the system, and allowed suppliers to connect to the system remotely, potentially exposing state secrets and sensitive criminal data.

The regulator said, "Many of them lacked adequate job descriptions, a signed confidentiality agreement, or a Certificate of Good Conduct."

The findings revealed that even personnel not responsible for wiretap operations could access sensitive data. RDI stressed that wiretapping systems, which store intercepted communications authorized by public prosecutors or intelligence agencies, must adhere to strict security laws. While Odido has since fixed the vulnerabilities, the regulator imposed the fine to ensure compliance and protect national security interests.

Written by

Sharon Florentine Editorial Director

Sharon Florentine is the editorial director for CyberRisk Alliance’s Channel Brands and acting editorial director for SC UK. She is responsible for setting strategy and editorial direction and developing content for news, features, analysis and other written content, moderates live webcasts, and oversees research projects. Sharon has previously held key editorial, content and leadership positions at DevOps.com, Security Boulevard, CIO.com, Ziff Davis Enterprise, and CRN, among others.