Also, a large Dutch telco - Odido - was hacked. The following data was breached from 6+ million Dutchies:
- Name
- Address
- Phone number
- Email address
- IBAN
- Date of birth" (For the majority if not all) Identification document no and validity
This data shouldn't have been on their records to begin with. Identification papers are needed for the "loan" of a mobile device - but could easily be wiped after the necessary checks are made. Keeping a DoB on file is shite as well.
Always minimize PII data of others (whether persons or orgs) and wipe evey detail as soon as possible.