Dutch National Police struck by massive data breach

The Dutch National Police has become the victim of an extensive data breach. An unknown threat actor was able to steal work-related information from approximately 65,000 police officers.

Secretary of Justice and Security David van Weel reported the data breach to the House of Representatives of the Netherlands last Friday.

In his letter, he wrote that an unknown threat actor hacked the account of a police officer and obtained “work-related contact information” of all 65,000 employees working at the National Police, including full names, job positions, phone numbers, and email addresses.

“Apart from the names of police officers, it does not concern private data or research data. The police are currently investigating the cause and impact of the incident. The police have reported the breach to the Dutch data protection authority,” the secretary said.

According to a spokesperson of the Dutch National Police, officers with sensitive positions, like undercover agents, aren’t on the list. Secretary Van Weel told the media that specialists are investigating the scope and impact of the breach.

“Like many of you, I am shocked that this could have happened and it affects me that the data of our colleagues turned out not to be safe. Of course, everyone inside and outside the police must be able to count on the data that the police have is in safe hands,” Chief of Police Janny Knol said in a statement.

Nine Kooiman, Chairman of the National Police Union, stated that they have received “an immense number of reports” from concerned police officers. They’re worried criminals will pay them an unexpected visit at their homes or they will receive intimidating phone calls.

To offer support to police officers who have questions or concerns, the National Police has opened a dedicated hotline they can contact.

“It goes without saying that all possible measures are being taken to prevent recurrence. My top priority is the protection of police colleagues and the prevention of further damage,” Knol adds.

The police ask their employees to be vigilant for phishing emails, suspicious messages, and phone calls.