Hackers spied on the data of Dutch prison employees
Hackers had access to sensitive data belonging to staff of the Dutch prisons agency for at least five months, according to an investigation by Argos.
The attackers were able to view email addresses, phone numbers, and security certificates of employees at Dienst Justitiële Inrichtingen (DJI – Dutch Custodial Institutions Agency). Experts warn this information could be used for blackmail or extortion, increasing risks for prison staff.
According to the National Cyber Security Centre (NCSC – Dutch National Cyber Security Centre), hackers also gained access to phones, tablets, and laptops used by staff. It is still unclear whether they were able to fully access the data stored on these devices. DJI has not confirmed whether the attackers still have access to its systems.
Another major concern is whether the hackers obtained location data. As a precaution, DJI advised employees to disable location services on their devices. The breach was examined by a specialized company, and staff members were informed on February 12.
A DJI spokeswoman confirmed the incident to broadcaster NOS and said the breach was part of a wider cyberattack affecting several government bodies, including the Autoriteit Persoonsgegevens (AP – Dutch Data Protection Authority) and the Raad voor de Rechtspraak (Council for the Judiciary). The cause of the leak is still under investigation, while the NCSC continues to monitor the situation.