# Netherlands and Germany 2026 data breaches

> Live situation record from CLSTR: https://clstr.news/situations/dutch-data-breach-triggers-collective-lawsuit-and-reveals-extent-of-resident-exposure
> Updated: 2026-07-23T04:43:46.000Z. Sources: 35. Developments: 14.

In April 2026 Dutch consumers launched a collective action against telecom operator Odido after a breach exposed data of more than six million residents. Days later, the municipality of Epe reported that a cyber‑attack stole personal details, including BSN numbers and identity documents, of almost all its 32 000 inhabitants. In May, the Dutch health sector was hit when a cyber‑attack on the laboratory Clinical Diagnostics leaked cervical‑cancer screening records of roughly half a million women, prompting the Women’s Rights Collective to sue the lab and the health ministry. Germany saw a series of health‑care breaches in the same period. Mid‑May, a hacker accessed a prescription‑verification service in Hannover, exposing over 70 000 patient files. Later, a provider for university hospitals and the IT firm Unimed were breached, compromising tens of thousands of records across multiple states. June incidents included a billing service for University Hospital Mainz leaking 2 764 private patients and LHM Service uploading more than 100 000 school‑related records to the darknet, likely by a former employee. A June study highlighted how repeated breaches are reshaping security practices and user trust. Late June, a ManageEngine survey of 302 German executives found three‑quarters of firms had suffered a cyber incident in the past year, with phishing accounting for 56 % of events. Nearly half flagged AI‑driven attacks as the top emerging risk, and insurance data showed July‑August incur the highest damage rates, especially in the hotel sector, while staffing gaps extend ransomware dwell time to an average of 31 days. On 28 June, German security agencies warned of a broader escalation in cyber and drone threats.

## Timeline

### 2026-07-23: Sachsen-Anhalt administration faces surge in cyber attacks

IT‑security incidents in Saxony‑Anhalt’s state administration doubled in early 2026, with phishing, DDoS and hardware theft rising, prompting heightened summer alert and noting a prior pro‑Russian hack and a n​

5 sources. https://clstr.news/cluster/sachsen-anhalt-administration-faces-surge-in-cyber-attacks

### 2026-06-30: Bremen Senator Eva Högl Warns of Multi‑Faced Security Threats in 2025 Intelligence Report

Bremen interior senator Eva Högl presented the 2025 intelligence report, warning of foreign‑state hybrid threats, rising right‑ and left‑wing extremism, antisemitism and Islamist risks, and urging more security

2 sources. https://clstr.news/cluster/bremen-senator-eva-hgl-warns-of-multifaced-security-threats-in-2025-intelligence-report

### 2026-06-28: German security agencies warn of rising cyber and drone threats

German agencies report rising cyber malware, smartphone fraud and drone espionage targeting Bremen’s critical infrastructure, urging stronger security measures.

2 sources. https://clstr.news/cluster/german-security-agencies-warn-of-rising-cyber-and-drone-threats

### 2026-06-26: German firms see surge in cyber attacks during summer holidays

Three‑quarters of German firms faced cyber incidents last year; phishing dominates and AI is seen as the top emerging risk. Summer staff shortages boost attacks, especially on hotels, raising email fraud and R

2 sources. https://clstr.news/cluster/german-firms-see-surge-in-cyber-attacks-during-summer-holidays

### 2026-06-15: Munich data leak exposes personal details of over 100,000 students and staff

A breach at Munich's LHM Service GmbH leaked over 100,000 personal records of students and staff to the darknet; authorities are investigating and suspect a former employee.

3 sources. https://clstr.news/cluster/munich-data-leak-exposes-personal-details-of-over-100000-students-and-staff

### 2026-06-12: Data breaches spark security overhaul and reveal shifting user trust in Germany

German cyberattacks on Unimed and Carnival expose security gaps, while a Mannheim study shows user trust drops after data leaks but largely recovers after six months.

2 sources. https://clstr.news/cluster/data-breaches-spark-security-overhaul-and-reveal-shifting-user-trust-in-germany

### 2026-06-11: Dutch women sue lab and health ministry over cervical‑cancer screening data breach

Dutch women, via the Women’s Rights Collective, sued Clinical Diagnostics and the health ministry after a cyberattack exposed records of hundreds of thousands in the cervical‑cancer screening program, sparking

2 sources. https://clstr.news/cluster/dutch-women-sue-lab-and-health-ministry-over-cervicalcancer-screening-data-breach

### 2026-06-05: Data breach at University Hospital Mainz exposes personal data of 2,764 patients

A cyberattack on an external billing provider for University Hospital Mainz compromised personal and health data of 2,764 private patients, with notifications sent by mail.

2 sources. https://clstr.news/cluster/data-breach-at-university-hospital-mainz-exposes-personal-data-of-2764-patients

### 2026-05-29: Unimed cyberattack exposes patient data at German hospitals

A cyberattack on Unimed, a Saarland IT provider, has led to the theft of patient records from hospitals across Germany, affecting up to 80,000 individuals, with investigations underway.

3 sources. https://clstr.news/cluster/unimed-cyberattack-exposes-patient-data-at-german-hospitals

### 2026-05-21: German university hospitals hit by cyberattack stealing tens of thousands of patient records

A German university‑hospital service provider suffered a cyberattack, compromising tens of thousands of patient records.

6 sources. https://clstr.news/cluster/german-university-hospitals-hit-by-cyberattack-stealing-tens-of-thousands-of-patient-records

### 2026-05-15: Hacker attack on Hannover prescription verifier compromises over 70,000 patient records

A cyberattack on a Hannover prescription verifier exposed over 70,000 patients’ health and personal data.

5 sources. https://clstr.news/cluster/hacker-attack-on-hannover-prescription-verifier-compromises-over-70000-patient-records

### 2026-05-13: Clinical Diagnostics data breach exposes health records of Dutch women

Dutch inspection reveals Clinical Diagnostics lab failed security, leading to breach of ~500,000 women's cervical cancer screening records.

5 sources. https://clstr.news/cluster/clinical-diagnostics-data-breach-exposes-health-records-of-dutch-women

### 2026-04-23: Data breach hits nearly all residents of Dutch town Epe

Hackers stole data for almost all of Epe's 32,000 residents in a March cyberattack, including BSNs and about 1,000 ID copies.

3 sources. https://clstr.news/cluster/data-breach-hits-nearly-all-residents-of-dutch-town-epe

### 2026-04-20: Dutch collective action filed against Odido over data breach affecting six million residents

CUIC files a collective action against Odido over a data breach affecting over six million Dutch residents, alleging multiple points of negligence.

5 sources. https://clstr.news/cluster/dutch-collective-action-filed-against-odido-over-data-breach-affecting-six-million-residents

---
Cite as: Netherlands and Germany 2026 data breaches. CLSTR, https://clstr.news/situations/dutch-data-breach-triggers-collective-lawsuit-and-reveals-extent-of-resident-exposure
