Netherlands
NLD
Court confirms Nebu cyberattack with data theft; orders disclosure (Mar 2023)
The Rotterdam District Court confirmed a cyberattack on Nebu’s servers on 10–11 Mar 2023 in which attackers stole data, and ordered Nebu to provide extensive information and commission an independent forensic investigation for customer Blauw. Downstream organizations (e.g., NS and VodafoneZiggo) warned customers about potential exposure. Sources do not evidence a Nebu service outage; TRACE materiality on operational disruption is unproven.
30
Estimated severity
30 / 100
95
Source reliability
95 / 100
Approximate Date
10/03/2023
Targeted Company
NEBU
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
BLAUW RESEARCH (Downstream customer)NEDERLANDSE SPOORWEGEN (Downstream customer)VODAFONEZIGGO (Downstream customer)ARBONED (Downstream customer)
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Netherlands
Affected countries
Netherlands
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
No information
Affected sectors
Technology & IT Services
Affected departments
No information
Attack Profile
Attack types
Unauthorized accessData breachData exfiltration
Attributed threat actors
No information
Sources
Incident Sources
uitspraken.rechtspraak.nlhttps://uitspraken.rechtspraak.nl/details?id=ECLI%3ANL%3ARBROT%3A2023%3A2931rechtspraak.nlhttps://www.rechtspraak.nl/organisatie-en-contact/organisatie/rechtbanken/rechtbank-rotterdam/nieuws/2023/04/nebu-moet-aan-blauw-informatie-verstrekken-over-datalekkennos.nlhttps://nos.nl/artikel/2469354-datalek-treft-ook-vodafoneziggo-gegevens-700-000-klanten-op-straat