ICC and Dutch Institutions Targeted in Pro-Russian Cyberattacks During NATO Summit
The Hague became the focal point of a cybersecurity incident last week as Dutch authorities reported a series of distributed denial-of-service (DDoS) attacks against local governments and institutions ahead of and during the NATO Summit. The attacks, claimed by pro-Russian hacktivist groups, were described as limited in impact but part of a broader pattern of hybrid threats.
The International Criminal Court (ICC), headquartered in The Hague, disclosed that it had been hit by a "sophisticated and targeted" cyberattack as NATO leaders convened in the city. The court detected the breach "late last week" and stated that containment measures were underway, along with an ongoing impact analysis. While the ICC did not specify the nature of the attack, Dutch authorities did not rule out sabotage as a possible motive.
The ICC has faced heightened scrutiny in recent weeks after issuing arrest warrants for Israeli Prime Minister Benjamin Netanyahu and former Defense Minister Yoav Gallant over Israel’s military actions in Gaza. The court’s Chief Prosecutor, Karim Khan, has also been a target of U.S. sanctions under the Trump administration, which revoked his access to Microsoft-provided email in May.
The cyberattacks coincided with a separate incident a power outage that disrupted train traffic in the Netherlands last Tuesday, though authorities have not confirmed a link between the two events. The incidents underscore growing concerns over state-linked cyber threats, particularly as Europe seeks to bolster its defenses against hybrid warfare, including intelligence-sharing initiatives and discussions on developing offensive cyber capabilities.
Source: https://www.politico.eu/article/icc-hit-by-cyberattack-around-nato-summit/
Netherlands cybersecurity rating report: https://www.rankiteo.com/company/nlnetherlands
"id": "NLN1772353652",
"linkid": "nlnetherlands",
"type": "Cyber Attack",
"date": "7/2025",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Judicial/Legal',
'location': 'The Hague, Netherlands',
'name': 'International Criminal Court (ICC)',
'type': 'International Organization'},
{'industry': 'Public Sector',
'location': 'Netherlands',
'name': 'Dutch local governments and institutions',
'type': 'Government'}],
'attack_vector': 'Distributed Denial-of-Service (DDoS)',
'date_detected': 'last week',
'description': 'The Hague became the focal point of a cybersecurity incident '
'as Dutch authorities reported a series of distributed '
'denial-of-service (DDoS) attacks against local governments '
'and institutions ahead of and during the NATO Summit. The '
'attacks, claimed by pro-Russian hacktivist groups, were '
'described as limited in impact but part of a broader pattern '
'of hybrid threats. The International Criminal Court (ICC) '
"disclosed a 'sophisticated and targeted' cyberattack during "
'the summit, with containment measures underway and impact '
'analysis ongoing.',
'impact': {'operational_impact': 'Disruption to train traffic (unconfirmed '
'link), limited impact on institutions'},
'investigation_status': 'Ongoing',
'motivation': 'Hybrid threats, possible sabotage',
'references': [{'source': 'News Article'}],
'response': {'containment_measures': 'Underway',
'incident_response_plan_activated': 'Yes'},
'threat_actor': 'Pro-Russian hacktivist groups',
'title': 'ICC and Dutch Institutions Targeted in Pro-Russian Cyberattacks '
'During NATO Summit',
'type': 'DDoS, Cyberattack'}