Lyce · Hybrid Watch

hw_f39ad06f012da4b5

Cyber-sabotage attempt on Dutch public infrastructure.

Dutch intelligence officials revealed that Russian state-sponsored hackers attempted for the first time in the Netherlands to gain control of a digital operating system within a public-service facility. Although the incident reportedly resulted in “minimal” actual damage, it was explicitly described as a sabotage-style cyber-operation rather than mere espionage. The report stated that a second Russian cyber operation targeted Dutch critical infrastructure, likely as preparation for future sabotage efforts, such as attacks on energy, telecom or water systems. This event underscores how hybrid-warfare tactics now extend into the cyber-domain, aiming at “deep-inland” infrastructure rather than frontline combat zones. The dynamics show a shift from reconnaissance and espionage towards active disruption: the adversary is preparing or executing sabotage via cyber means, thereby increasing uncertainty and cost without deploying traditional military hardware.

Occurrence
2025-04-22
Publication
2025-04-21T22:00:00Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
NL
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2025-04-21T22:00:00Z

    Dutch intelligence officials revealed that Russian state-sponsored hackers attempted for the first time in the Netherlands to gain control of a digital operating system within a public-service facility. Although the incident reportedly resulted in “minimal” actual damage, it was explicitly described as a sabotage-style cyber-operation rather than mere espionage. The report stated that a second Russian cyber operation targeted Dutch critical infrastructure, likely as preparation for future sabotage efforts, such as attacks on energy, telecom or water systems. This event underscores how hybrid-warfare tactics now extend into the cyber-domain, aiming at “deep-inland” infrastructure rather than frontline combat zones. The dynamics show a shift from reconnaissance and espionage towards active disruption: the adversary is preparing or executing sabotage via cyber means, thereby increasing uncertainty and cost without deploying traditional military hardware.