Dutch ransomware attacks on healthcare

In May 2026 a Dutch dental care provider, Dentalzorg, confirmed it had been hit by a ransomware intrusion that may have exposed patient records, including personal identifiers and billing details. The clinic engaged external cybersecurity experts, notified patients of potential phishing attempts, and cautioned against sharing personal or financial information in unsolicited communications.

Two weeks later, the Dutch Data Protection Authority released its 2025 ransomware report, documenting a rise in incidents nationwide—from 127 the previous year to 136 in 2025. The report highlighted that health and welfare, along with trade, automotive, and information sectors, were the most frequent targets. It detailed the scale of data breaches, the mix of encryption‑only and data‑theft incidents, and the financial impact on organisations. The authority urged companies to maintain up‑to‑date systems, implement robust incident‑response plans, keep reliable backups, and avoid paying ransoms, framing Dentalzorg’s attack within a broader, growing threat landscape.

Together, the snapshots illustrate an escalating ransomware problem in the Netherlands, particularly affecting the health sector, and the regulatory response aimed at mitigating future attacks.