The Openbaar Ministerie (OM), the Netherlands' Public Prosecution Service, suffered a cyber attack exploiting vulnerabilities in Citrix devices, forcing a complete disconnection from the internet to prevent further intrusion. The breach disrupted critical operations, including court case processing, as external communications (emails, digital document transfers) were halted, reverting to manual, paper-based workflows (e.g., postal mail, physical paperwork for lawyers). The outage also disabled speed cameras nationwide—fixed, average-speed, and portable units—compromising road safety enforcement while only mobile-phone-detection cameras remained functional. The attack’s ripple effects delayed legal proceedings, increased administrative burdens, and created unintended public safety risks by neutralizing traffic monitoring systems. The NCSC and Dutch data regulators were notified, but system reactivation remains contingent on confirming the hackers’ expulsion, prolonging operational paralysis.

The Openbaar Ministerie (OM), the Public Prosecution Service of the Netherlands, suffered a severe operational disruption due to the exploitation of the Citrix NetScaler vulnerability CVE-2025-6543. The attack, which occurred as a zero-day exploit, led to significant downtime, with the organization only restoring its email servers and online services after an extended period. The attackers wiped traces of the intrusion, indicating a sophisticated and targeted cyber attack aimed at critical infrastructure. The breach caused substantial operational disruptions, affecting the organization's ability to function normally.