Supermarket chain Albert Heijn, along with sister companies Etos and Gall & Gall, has been grappling with a large-scale cybersecurity incident since Sunday afternoon. To optimally protect the IT environment and customer data, parent company Ahold Delhaize immediately decided to preventively shut down various internal systems. The consequences for consumers are immediately noticeable in daily […]
Minister David van Weel of Justice and Security has made it clear in a firm response that digital security at the Public Prosecution Service (OM) must improve drastically. He states that a significant catch-up effort is required to bring information security up to the necessary level. These statements follow the painful conclusions of an independent […]
The information security of the IT systems of the Public Prosecution Service (OM) was insufficient for years, an independent commission of inquiry has concluded. This structural vulnerability resulted in a serious cyber breach in July 2025. The attackers managed to infiltrate by successfully exploiting a vulnerability in internet-facing Citrix NetScaler systems. Because the OM had […]
Dutch cyber mayors are collectively sounding the alarm, demanding that the cabinet provide the necessary funding for local information security. Municipalities are being assigned increasingly heavy tasks and legal obligations from The Hague and Europe to protect their digital infrastructure, including the recent Cybersecurity Act (NIS2). Although awareness of digital threats such as ransomware and […]
The court has officially ruled that the notorious Citrix hack at the Public Prosecution Service (OM) was a situation of force majeure. This decision is based on the fact that it involved an unknown zero-day vulnerability that lay entirely outside the organization’s influence and sphere of risk. A crucial element in this ruling was that […]
The Berlin Senate has been hit by Rhysida ransomware, with attackers potentially seizing sensitive government data. According to the attackers, the breach involves nearly 6 GB of data, including the personal information of 12,000 individuals, criminal cases, contracts, emergency plans, and login credentials. The cybercriminals are demanding €2 million and threatening to publish the stolen […]
The Cybersecurity Act implements NIS2, but according to the author, it aligns too closely with existing sectoral structures instead of achieving true harmonisation. Especially now that digital threats, ransomware, and supply chain risks are increasing, collective European cyber resilience is essential. NIS2 should not be adapted to the Dutch status quo; instead, organisations and regulations […]
80% of European companies believe they have control over their email, while approximately half are dependent on non-European providers. 56% fear that corporate data could become accessible through extraterritorial legislation such as the US CLOUD Act. Data storage in Europe does not automatically mean data sovereignty: the jurisdiction under which the provider falls is also […]
Dutch regulators (ACM, AFM, AP, DNB, and RDI) are calling on the government and the business community to make digital autonomy a strategic procurement criterion and to become less dependent on a small number of (mostly non-European) IT providers. Open standards, interoperability, and switching options must reduce vendor lock-in and increase cyber resilience. As a […]
The European Commission is launching an action plan to ensure that AI strengthens European cyber resilience rather than posing a security risk. The focus is on the secure deployment of AI, the protection of critical sectors against AI attacks, and the development of European digital sovereignty. To achieve this, an independent evaluation capacity for advanced […]
- 1
- 2