The Dutch Ministry of Finance detected a cyberattack on March 19, 2026, leading to the shutdown of its digital treasury banking portal and other systems. The breach affected some employees and disrupted online services for approximately 1,600 public institutions.
Initial Access
Employee Account Compromise
confirmed
A security breach was detected, which affected some employees of the Dutch Ministry of Finance, indicating initial access was gained through employee accounts.
Defender cut points
Enforce phishing-resistant FIDO2 MFA on all employee accounts.Implement security awareness training to educate employees on identifying social engineering attempts.