{"slug": "dutch-hackers-collective-hacked", "title": "Dutch Hackers Collective Hacked", "summary": "The Dutch security research collective DIVD disclosed on 24 September 2026 that it was hacked in what it says is an \"agentic AI powered attack,\" a modus operandi the group states it has not seen before. DIVD said it has blocked access to its infrastructure, launched a forensics investigation with a third-party incident response team, informed directly involved parties, and reported the incident to the Autoriteit Persoonsgegevens and the National Cyber Security Centre, with spokesperson Marieke Rijken handling press inquiries. The group said it is treating the situation as a worst-case scenario and will publish its next public update on Monday 28 September.", "body_md": "# It was a matter of when, not if...\n\n24 Sep 2026 - DIVD\n\nSecurity people always say it’s not a matter of if, but when you get hacked. It took us (almost) seven years but we can now say that we’re the hackers that got hacked. We noticed suspicious activity, investigated, and came to the inevitable conclusion that damn, we got hacked.\n\nSo what do hackers do when they get hacked? Handle it the way we think it should be handled. That is open, transparent and honest, even if it sucks. So far, we’ve been in full incident response mode, blocked access to our infrastructure and started a forensics investigation with the assistance of a third party incident response team.\n\nThis is an attack we have not seen before. Not because it’s our first, but because the modus operandi indicates that this is an agentic AI powered attack. Careful investigation takes time and our investigation is still ongoing. At this moment we can’t rule anything out yet, so we handle this situation as a worst-case-scenario and assume breach until proven otherwise.\n\nToday we have informed the directly involved parties, reported the incident to the Autoriteit Persoonsgegevens and the National Cyber Security Centre and discussed our options with the police.\n\nOur priorities at this point are keeping our infrastructure isolated and secure, focusing on the forensics and looking after our volunteers who have worked for a safe digital society for the past years and in the meantime we learn a lot from this type of attack.\n\nOur next public update follows on Monday 28 September, or sooner if we have more to share.\n\nFor questions and press please reach out to Marieke Rijken via communications@divd.nl. She is the spokeperson for this incident.\n\nLast modified: 24 Sep 2026 23:34 CEST", "url": "https://wpnews.pro/news/dutch-hackers-collective-hacked", "canonical_source": "https://csirt.divd.nl/2026/09/24/when-not-if/", "published_at": "2026-09-25 09:26:23+00:00", "updated_at": "2026-09-25 10:00:09.363433+00:00", "lang": "en", "topics": ["ai-safety", "artificial-intelligence", "ai-agents"], "entities": ["DIVD", "Autoriteit Persoonsgegevens", "National Cyber Security Centre", "Marieke Rijken"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/dutch-hackers-collective-hacked", "markdown": "https://wpnews.pro/news/dutch-hackers-collective-hacked.md", "text": "https://wpnews.pro/news/dutch-hackers-collective-hacked.txt", "jsonld": "https://wpnews.pro/news/dutch-hackers-collective-hacked.jsonld"}}