Dutch Police Says Phishing Breach Had Limited Impact; Investigation Ongoing
Summary
The Dutch police say their SOC quickly blocked access after a phishing attack. The impact remains under investigation; officials say citizen and investigative data were not exposed, while affected systems and any employee-data exposure remain unclear.
Key points
- The Dutch National Police said a phishing attack led to a security breach; its Security Operations Center detected it quickly and blocked the attackers’ access.
- Police officials say citizens’ data and investigative information were not accessed or exposed; the impact is still under investigation.
- The police have not disclosed when the attack was detected, which systems or accounts were affected, or whether employee data was exposed.
- A criminal investigation is underway.
- In a separate 2024 breach linked by the police to a state actor, work-related contact information for multiple officers was stolen; no specific threat group has been named.
- After the 2024 incident, the police said they strengthened security with continuous system monitoring and more frequent two-factor authentication.
Article Details
- Victim Organization
- Dutch National Police (Politie)
- Incident Type
- Successful phishing attack resulting in a security breach
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- The Security Operations Center quickly detected the incident and blocked the attackers’ access to compromised systems. The impact is under investigation and was described by the police as appearing limited. Whether employee data was exposed is unknown.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed