Compliance and Legislation Defense & Government Incident Response Information Security Security

Years of deficiencies in IT security led to a major hack at the Public Prosecution Service

The information security of the IT systems of the Public Prosecution Service (OM) was insufficient for years, an independent commission of inquiry has concluded. This structural vulnerability resulted in a serious cyber breach in July 2025. The attackers managed to infiltrate by successfully exploiting a vulnerability in internet-facing Citrix NetScaler systems. Because the OM had […]

Compliance and Legislation Cybersecurity Defense & Government Incident Response NIS2

When is an IT hack considered legal force majeure?

The court has officially ruled that the notorious Citrix hack at the Public Prosecution Service (OM) was a situation of force majeure. This decision is based on the fact that it involved an unknown zero-day vulnerability that lay entirely outside the organization’s influence and sphere of risk. A crucial element in this ruling was that […]