Netherlands
NLD
AddComm supplier breach hits Vattenfall, Essent, water companies
Customer communications outsourcer AddComm disclosed it was hit by ransomware in May 2024 (attack window May 5–17; detected May 17). External experts found data theft for a subset of customers. Multiple Dutch organizations warned customers of possible data theft linked to the AddComm incident, including energy suppliers Essent and Vattenfall, ABN AMRO, and water utilities and public bodies such as Waterbedrijf Groningen and WMD Drinkwater.
70
Estimated severity
70 / 100
92
Source reliability
92 / 100
Approximate Date
17/05/2024
Targeted Company
ADDCOMM
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
ESSENT (Downstream customer)VATTENFALL (Downstream customer)WATERBEDRIJF GRONINGEN (Downstream customer)WMD DRINKWATER (Downstream customer)ABN AMRO (Downstream customer)PORTAAL (Downstream customer)
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Netherlands
Affected countries
Netherlands
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
No information
Affected sectors
Professional & Business Services
Affected departments
No information
Attack Profile
Attack types
Third-party or partner compromiseData breachData exfiltrationRansomware
Attributed threat actors
No information
Sources
Incident Sources
addcomm.nlhttps://www.addcomm.nl/addcomm-geraakt-door-ransomware/abnamro.comhttps://www.abnamro.com/en/news/abn-amro-supplier-attacked-by-ransomwaresecurity.nlhttps://www.security.nl/posting/842955/Essent+en+Vattenfall+waarschuwen+klanten+voor+datalek+bij+AddCommwaterbedrijfgroningen.nlhttps://waterbedrijfgroningen.nl/nieuws/hack-bij-leverancier-pas-op-je-e-mail/wmd.nlhttps://wmd.nl/nieuws/update-hack-bij-addcomm/nltimes.nlhttps://nltimes.nl/2024/05/24/social-housing-tenants-data-may-stolen-supplier-hackicsstrive.comhttps://icsstrive.com/incident/widespread-fallout-after-ransomware-attack-at-service-provider-for-customer-communication-in-the-netherlandsziptone.nlhttps://ziptone.nl/en/nieuws/klantdata-van-verschillende-bedrijven-ontvreemd-bij-cyberaanval-op-addcommkonbriefing.comhttps://konbriefing.com/en-topics/cyber-attacks-2024-cny-netherlands.html