Dutch Public Prosecution Service IT security was inadequate for years before hack

An investigation commissioned by the Ministry of Justice and Security reveals that the Public Prosecution Service's IT security had been inadequate for years prior to the 2025 hack. At the time, there was no system in place to monitor suspicious activity on its network. The cyberattack eventually occurred through a vulnerability in Citrix software.