Judges in Rotterdam have given software company Nebu two days to provide market research firm Blauw with all the information it currently has about last month’s massive data leak.

Blauw went to court in an effort to force Nebu to come clean about how much and what data has been leaked and how it happened. Blauw is required by law to inform its clients about the leak.

VodafoneZiggo, the NS and health insurance company CZ are among the reported 139 companies whose client data appears to have been downloaded via the leak. In total, information from two million people may have been compromised.

The court said that Nebu had yet to call in independent forensic researchers or to carry out its own in-depth probe into the leak. The company has now been given five days to do so.

In addition, Nebu must provide Blauw with any new information that emerges within four hours of discovery and to provide the firm with an update twice a day from now on.

Nebu is part of Canadian stock exchange listed company Enghouse, and according to its website, provides software to market research companies in several other European countries.