Lyce · Hybrid Watch

hw_686c6919e5f92ae3

Dutch Ministry of Finance database breached in cyberattack.

On 19 March 2026, the Dutch Ministry of Finance detected unauthorized access to several internal systems used by its policy department after receiving an alert from a third party. The ministry immediately launched an investigation and blocked access to the affected systems, disrupting the work of a portion of its employees, while services provided to citizens and businesses—including taxation, customs and benefits—remained unaffected. The ministry did not disclose technical details about the intrusion or its extent, and at the time of the report no cybercrime group had claimed responsibility, though Dutch intelligence suspects a state actor to be behind the attack.

Occurrence
2026-03-19
Publication
2026-03-18T22:18:56Z
First observed
2026-09-27T15:36:33.953Z
Review status
Not assessed
Countries
NL
Updated
2026-10-02T16:30:09.889Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2026-03-18T22:18:56Z

    On 19 March 2026, the Dutch Ministry of Finance detected unauthorized access to several internal systems used by its policy department after receiving an alert from a third party. The ministry immediately launched an investigation and blocked access to the affected systems, disrupting the work of a portion of its employees, while services provided to citizens and businesses—including taxation, customs and benefits—remained unaffected. The ministry did not disclose technical details about the intrusion or its extent, and at the time of the report no cybercrime group had claimed responsibility, though Dutch intelligence suspects a state actor to be behind the attack.