[CLSTR]
< Back to situations

This situation has concluded

It was preserved as a record on August 23; the timeline below shows how it unfolded, with sources. Get the briefing to follow the top situations still developing: three emails a week, sourced and in order.

[SITUATION] · [QUIET] · [TECHNOLOGY]

14 clusters · 35 sources · 94 days · First seen · Last updated

Netherlands and Germany 2026 data breaches

Overview

In April 2026 Dutch consumers launched a collective action against telecom operator Odido after a breach exposed data of more than six million residents. Days later, the municipality of Epe reported that a cyber‑attack stole personal details, including BSN numbers and identity documents, of almost all its 32 000 inhabitants. In May, the Dutch health sector was hit when a cyber‑attack on the laboratory Clinical Diagnostics leaked cervical‑cancer screening records of roughly half a million women, prompting the Women’s Rights Collective to sue the lab and the health ministry. Germany saw a series of health‑care breaches in the same period. Mid‑May, a hacker accessed a prescription‑verification service in Hannover, exposing over 70 000 patient files. Later, a provider for university hospitals and the IT firm Unimed were breached, compromising tens of thousands of records across multiple states. June incidents included a billing service for University Hospital Mainz leaking 2 764 private patients and LHM Service uploading more than 100 000 school‑related records to the darknet, likely by a former employee. A June study highlighted how repeated breaches are reshaping security practices and user trust. Late June, a ManageEngine survey of 302 German executives found three‑quarters of firms had suffered a cyber incident in the past year, with phishing accounting for 56 % of events. Nearly half flagged AI‑driven attacks as the top emerging risk, and insurance data showed July‑August incur the highest damage rates, especially in the hotel sector, while staffing gaps extend ransomware dwell time to an average of 31 days. On 28 June, German security agencies warned of a broader escalation in cyber and drone threats.

Timeline

  1. [TECHNOLOGY] 5 sources
    Sachsen-Anhalt administration faces surge in cyber attacks

    IT‑security incidents in Saxony‑Anhalt’s state administration doubled in early 2026, with phishing, DDoS and hardware theft rising, prompting heightened summer alert and noting a prior pro‑Russian hack and a n​

  2. [POLITICS] 2 sources
    Bremen Senator Eva Högl Warns of Multi‑Faced Security Threats in 2025 Intelligence Report

    Bremen interior senator Eva Högl presented the 2025 intelligence report, warning of foreign‑state hybrid threats, rising right‑ and left‑wing extremism, antisemitism and Islamist risks, and urging more security

  3. [TECHNOLOGY] 2 sources
    German security agencies warn of rising cyber and drone threats

    German agencies report rising cyber malware, smartphone fraud and drone espionage targeting Bremen’s critical infrastructure, urging stronger security measures.

  4. [TECHNOLOGY] 2 sources
    German firms see surge in cyber attacks during summer holidays

    Three‑quarters of German firms faced cyber incidents last year; phishing dominates and AI is seen as the top emerging risk. Summer staff shortages boost attacks, especially on hotels, raising email fraud and R

  5. [TECHNOLOGY] 3 sources
    Munich data leak exposes personal details of over 100,000 students and staff

    A breach at Munich's LHM Service GmbH leaked over 100,000 personal records of students and staff to the darknet; authorities are investigating and suspect a former employee.

  6. [TECHNOLOGY] 2 sources
    Data breaches spark security overhaul and reveal shifting user trust in Germany

    German cyberattacks on Unimed and Carnival expose security gaps, while a Mannheim study shows user trust drops after data leaks but largely recovers after six months.

  7. [HEALTH] 2 sources
    Dutch women sue lab and health ministry over cervical‑cancer screening data breach

    Dutch women, via the Women’s Rights Collective, sued Clinical Diagnostics and the health ministry after a cyberattack exposed records of hundreds of thousands in the cervical‑cancer screening program, sparking

  8. [HEALTH] 2 sources
    Data breach at University Hospital Mainz exposes personal data of 2,764 patients

    A cyberattack on an external billing provider for University Hospital Mainz compromised personal and health data of 2,764 private patients, with notifications sent by mail.

  9. [TECHNOLOGY] 3 sources
    Unimed cyberattack exposes patient data at German hospitals

    A cyberattack on Unimed, a Saarland IT provider, has led to the theft of patient records from hospitals across Germany, affecting up to 80,000 individuals, with investigations underway.

  10. [TECHNOLOGY] 6 sources
    German university hospitals hit by cyberattack stealing tens of thousands of patient records

    A German university‑hospital service provider suffered a cyberattack, compromising tens of thousands of patient records.

  11. [HEALTH] 5 sources
    Hacker attack on Hannover prescription verifier compromises over 70,000 patient records

    A cyberattack on a Hannover prescription verifier exposed over 70,000 patients’ health and personal data.

  12. [HEALTH] 5 sources
    Clinical Diagnostics data breach exposes health records of Dutch women

    Dutch inspection reveals Clinical Diagnostics lab failed security, leading to breach of ~500,000 women's cervical cancer screening records.

  13. [TECHNOLOGY] 3 sources
    Data breach hits nearly all residents of Dutch town Epe

    Hackers stole data for almost all of Epe's 32,000 residents in a March cyberattack, including BSNs and about 1,000 ID copies.

  14. [TECHNOLOGY] 5 sources
    Dutch collective action filed against Odido over data breach affecting six million residents

    CUIC files a collective action against Odido over a data breach affecting over six million Dutch residents, alleging multiple points of negligence.

Sources

AD.nl · ap-verlag.de · augsburger-allgemeine.de · australiankiteboarding.com · borncity.com · bremennews.de · byc-news.de · dutchnews · email.t-online.de · golem · harzkurier.de · haskala.de · ikz-online.de · it-daily.net · journalistenwatch.com · kreiszeitung.de · lv-sachsen-anhalt.de · ndr · neue-pressemitteilungen.de · newsmonkey.be · nu.nl · pdf.zeit.de · sat1regional.de · searchandcompareautos.com · security.nl · STERN · stern · suedkurier.de · swr · Techzine · upday.com · welingelichtekringen · wochenblatt-reporter.de · www4.mdr.de · zeitenvogel.de