Data leak

Dutch Ministry of Finance (Rijksfinancien) Data Breach

📅 2026-03-01 🏢 Dutch Ministry of Finance / Rijksfinancien IT systems
Primary Source ↗

Incident Details

In early 2026, the Dutch Ministry of Finance (Ministerie van Financiën, also known as Rijksfinancien) disclosed a cybersecurity breach, details of which were reported in DataBreachToday’s weekly breach roundup in April 2026. The Dutch Ministry of Finance manages national taxation, budget policy, financial markets regulation, and state assets. A breach of this ministry could expose sensitive government financial data, tax information, budget forecasting data, or personal information of tax registrants. The Netherlands has experienced several high-profile government cyber incidents in recent years, including the ASML cyber espionage campaigns, the DigiD digital identity platform attacks, and various local government ransomware incidents. The Dutch National Cyber Security Centre (NCSC) and the Algemene Inlichtingen- en Veiligheidsdienst (AIVD, Dutch intelligence service) monitor and respond to breaches of this nature. The Dutch government operates under GDPR which requires 72-hour notification of the Autoriteit Persoonsgegevens (Dutch Data Protection Authority, AP) for breaches likely to result in risk to individuals. The full scope, cause, and perpetrator of the Ministry of Finance breach had not been publicly confirmed at the time of initial reporting in April 2026.

Technical Details

Initial Attack Vector
Unknown attacker gained unauthorized access to Dutch Ministry of Finance (Rijksfinancien) systems; the specific attack vector — whether phishing, exploitation of an internet-facing vulnerability, or supply chain — was not confirmed at time of initial reporting
Vendor / Product
Dutch Ministry of Finance / Rijksfinancien IT systems

Timeline

  1. 2026-03-01 Breach occurred
  2. 2026-04-02 Publicly disclosed