Lyce · Hybrid Watch

hw_686c6919e5f92ae3

Dutch Ministry of Finance database breached in cyberattack.

View this signal on the map

On 19 March 2026, the Dutch Ministry of Finance detected unauthorized access to several internal systems used by its policy department after receiving an alert from a third party. The ministry immediately launched an investigation and blocked access to the affected systems, disrupting the work of a portion of its employees, while services provided to citizens and businesses—including taxation, customs and benefits—remained unaffected. The ministry did not disclose technical details about the intrusion or its extent, and at the time of the report no cybercrime group had claimed responsibility, though Dutch intelligence suspects a state actor to be behind the attack.

Occurrence
Publication
First observed
Review status
Not assessed
Countries
Netherlands
Updated

Attribution

Pattern-compatible

Facts

No facts

Sources

  1. Role
    Discovery lead
    Publication

    On 19 March 2026, the Dutch Ministry of Finance detected unauthorized access to several internal systems used by its policy department after receiving an alert from a third party. The ministry immediately launched an investigation and blocked access to the affected systems, disrupting the work of a portion of its employees, while services provided to citizens and businesses—including taxation, customs and benefits—remained unaffected. The ministry did not disclose technical details about the intrusion or its extent, and at the time of the report no cybercrime group had claimed responsibility, though Dutch intelligence suspects a state actor to be behind the attack.