Netherlands
NLD
RBG warns of data exposure after supplier AddComm ransomware attack
The Regionale Belasting Groep (RBG) warned on 24 May 2024 that supplier AddComm suffered a ransomware attack (5–17 May, discovered 17 May). RBG’s systems were not breached, but data of some residents/companies in its service area were accessed. RBG and local authorities notified the Dutch DPA and advised vigilance. No operational disruption at RBG was reported.
28
Estimated severity
28 / 100
82
Source reliability
82 / 100
Approximate Date
24/05/2024
Targeted Company
REGIONALE BELASTING GROEP
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
ADDCOMM (Third-party service provider)
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Netherlands
Affected countries
Netherlands
Impacted regions
Netherlands · Netherlands
Operational Impact
Duration
12 days
Financial impact (USD M)
No information
Impact types
No information
Affected sectors
Government & Public Administration
Affected departments
No information
Attack Profile
Attack types
Third-party or partner compromiseData exfiltrationData breach
Attributed threat actors
No information
Sources
Incident Sources
derbg.nlhttps://www.derbg.nl/update-gegevens-buitgemaakt-door-hack-bij-leverancierhhdelfland.nlhttps://www.hhdelfland.nl/actueel/nieuwsoverzicht/2024/mei/systeem-leverancier-rbg-gehacktschiedam.nlhttps://www.schiedam.nl/nieuws/hack-bij-leverancier-van-de-rbggemeente.nuhttps://www.gemeente.nu/bedrijfsvoering/ai/meer-gemeenten-melden-diefstal-gegevens-na-cyberaanval