Dutch Police Data Theft via Compromised Email and M365 Cloud Security Gaps

Dutch police suffered a major data theft attributed to a Russian cyber group after attackers gained access via an employee’s email account and exfiltrated sensitive personnel information. Stolen data reportedly included the contact details of nearly all ~65,000 police officers, along with profile photos and other personal data, triggering significant internal unrest and concern about officer safety and privacy.

Investigative reporting indicates the organization had been warned in advance about security weaknesses relevant to the intrusion path. Documents obtained under the Netherlands’ Open Government/Woo framework describe an internal November 2022 risk analysis that raised concerns about the implementation and security of Microsoft’s M365 cloud (used for tools such as Teams), explicitly noting “inherent” cloud risks and that state actors would be highly motivated to access the environment. Following the 2024 theft, police reportedly stood up a heavy crisis response structure (the Nationale Staf Grootschalig en Bijzonder Optreden) to reduce immediate risk and implement additional security measures, while political and union voices characterized the incident as severe and questioned why earlier warnings were not acted upon.