Russian Cyber Attacks Target Dutch Infrastructure in Growing Hybrid Threats

The Netherlands is facing a growing number of hybrid threats, particularly from Russia, according to the 2024 annual report of the Dutch Military Intelligence and Security Service (MIVD), which was sent to the House of Representatives today.

The agency warns that Russian efforts to disrupt and weaken Dutch society have intensified, with cyber sabotage and espionage activities becoming more frequent and targeted.

MIVD identified multiple incidents of Russian-origin cyber operations last year. Notably, a Russian hacker group carried out a cyber-sabotage attack on the digital system of a public facility in the Netherlands—the first known incident of its kind in the country. While the attack did not cause any damage, MIVD classified it as a clear attempt at disruption.

Another cyber operation targeted critical Dutch infrastructure, possibly in preparation for future sabotage. The attackers, however, were unsuccessful in breaching the network. In addition, Russian actors launched cyber-attacks against political party websites and public transport platforms. According to MIVD, these actions appeared to be aimed at interfering with the European elections by complicating voting processes for Dutch citizens.

“The MIVD does not see the Russian threat to Europe decreasing but increasing. This also after a possible end to the war with Ukraine,” said Vice Admiral Peter Reesink, MIVD Director. He emphasized that Russia’s transition to a war economy has enabled it to scale up military capabilities more rapidly than NATO.

The Netherlands’ geographic position and developed infrastructure place it in a key role for NATO and European defense. The MIVD noted that this makes the country a strategic focus for Russian intelligence. In recent years, Russian units have mapped North Sea infrastructure, including internet cables and energy supplies. Some of these efforts have involved underwater espionage, suggesting preparatory steps for future disruption.

“These disruptions could have significant effects not only in the Netherlands but across Europe and globally,” the MIVD report noted.

Responding to the findings, Minister of Defence Ruben Brekelmans said, “This annual report confirms that we live in a grey zone between war and peace. We already have to defend ourselves against cyber attacks, espionage, and attempts at sabotage every day in the Netherlands.”

He added that NATO countries, including the Netherlands, must rapidly strengthen military capabilities and defense industries to avoid vulnerabilities and deter further Russian aggression.

Vice Admiral Reesink also stressed the broader geopolitical implications: “There are turbulent developments in international politics and in the area of alliances. They have called into question certainties on which we could rely and trust until recently. The speed at which this is happening and the potential effect on our security is unprecedented.”