Dutch Finance Ministry Takes Treasury Portal Offline After Security Breach

Summary
After detecting a breach on March 19, the Dutch Finance Ministry took systems including its treasury portal offline. About 1,600 public institutions cannot view balances online, but funds and payments remain accessible.
Key points
- The ministry reported detecting a security breach on March 19 and taking several systems offline on March 23.
- The outage prevents about 1,600 public institutions from viewing treasury account balances and using some portal services.
- Institutions retain access to their funds, and incoming and outgoing payments continue through regular banking channels.
- The ministry has not disclosed whether data was stolen or identified a responsible threat actor.
- The NCSC and external experts are assisting with the forensic investigation; the ministry has notified the Dutch Data Protection Authority and filed a report with the police High Tech Crime Team.
Article Details
- Victim Organization
- Dutch Ministry of Finance
- Incident Type
- Security breach affecting ministry systems; several systems, including the digital treasury banking portal, were taken offline for security reasons.
- Affected Records
- Not disclosed; the number of affected employees and whether data was stolen are unknown.
- Affected Data Size
- Not disclosed
- Operational Impact
- Approximately 1,600 public institutions could not view treasury account balances online or use the portal for loans, deposits, credit-limit changes, or reports. Participants retained access to funds, and incoming and outgoing payments continued through regular banking channels; essential services were maintained manually where necessary.
- Ransom Or Extortion
- No ransom or extortion activity reported; no threat actor or cybercrime group had claimed responsibility.
- Claim Status
- confirmed
