Verified ransomware and data-breach notification context · Netherlands / NCTV
Ransomware incidents and cyberattack data-breach notifications — Netherlands 2024
Market context — not industry-specific evidence
The NCTV Cybersecuritybeeld Nederland 2025 reports at least 121 unique Dutch ransomware incidents identified in 2024, with 76 known via police reports and 20 via incident response companies. The Dutch Data Protection Authority received 1,430 unique data breach notifications originating from cyberattacks in 2024; of the 853 investigated, 112 (13%) involved ransomware. At least 53% of the known ransomware attacks involved data theft. These figures are 2024 historical context reported in the 2025 CSBN; they are not 2025 incident prevalence, total Dutch business incident prevalence, or industry-specific evidence.
Known ransomware incidents in the Netherlands — 2024 (source-stated minimum)
- Total unique ransomware incidents (at least) — 121
- 121
- Unit
- ransomware incidents (minimum, 2024)
- Period
- 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025
- Scope
- Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures)
- Known via police reports — 76
- 76
- Unit
- ransomware incidents known via police reports (2024)
- Period
- 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025
- Scope
- Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures)
- Known via incident response companies — 20
- 20
- Unit
- ransomware incidents known via incident response companies (2024)
- Period
- 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025
- Scope
- Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures)
2024 figures reported in NCTV CSBN 2025. The 121 total is a source-stated minimum ("at least"). These are known-floor counts; they are not total Dutch business incident rates and not industry-specific evidence.
Cyberattack data-breach notifications received by Dutch AP — 2024
- Total notifications received — 1,430
- 1,430
- Unit
- data breach notifications from cyberattacks (2024)
- Period
- 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025
- Scope
- Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures)
- Notifications investigated — 853
- 853
- Unit
- investigated data breach notifications from cyberattacks (2024)
- Period
- 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025
- Scope
- Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures)
- Investigated notifications involving ransomware — 112
- 112
- Unit
- investigated cyberattack data-breach notifications involving ransomware (2024)
- Period
- 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025
- Scope
- Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures)
- Ransomware share of investigated notifications — 13%
- 13%
- Unit
- percent of investigated cyberattack data-breach notifications involving ransomware (2024)
- Period
- 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025
- Scope
- Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures)
2024 figures reported in NCTV CSBN 2025. Dutch Data Protection Authority (AP) data-breach notification context only. These are not total Dutch business incident rates and not industry-specific evidence.
Ransomware attacks involving data theft — Netherlands 2024 (minimum)
- Of known ransomware attacks (at least)
- 53%
- Unit
- percent of ransomware attacks involving data theft (minimum, 2024)
- Period
- 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025
- Scope
- Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures)
At least 53% of the identified ransomware attacks in the Netherlands in 2024 involved data theft, as reported in NCTV CSBN 2025.
Source-stated minimum only ("at least 53%"). 2024 figure reported in NCTV CSBN 2025. Not a total Dutch business figure and not industry-specific evidence.
Source: NCTV, Cybersecuritybeeld Nederland 2025, 26 November 2025
Scope: NCTV, Cybersecuritybeeld Nederland 2025, 26 November 2025. Ransomware incident counts and data-breach notification figures are 2024 values. The 121 total ransomware figure is a source-stated minimum. The 53% data theft share is a source-stated minimum. These figures do not measure 2025 incident prevalence, total Dutch business incident prevalence, hidden incident prevalence, industry-specific evidence, compliance achievement, certification or security outcomes.
Methodology: Official NCTV Cybersecuritybeeld Nederland 2025. The ransomware incident counts (at least 121 total, 76 police reports, 20 incident response) and cyberattack data-breach notification figures (1,430 total, 853 investigated, 112 ransomware-related, 13% share, at least 53% data theft) are 2024 figures reported in the 2025 edition of the CSBN. They are not 2025 incident prevalence, total Dutch business incident prevalence, hidden incident prevalence, or industry-specific evidence. The 121 total ransomware figure and the 53% data theft share are source-stated minimums. Do not present as compliance achievement, certification or proof of security.
Accessible data table
| Metric | Value | Source | Scope | Reporting period |
|---|---|---|---|---|
| Total unique ransomware incidents (at least) — 121 | 121 ransomware incidents (minimum, 2024) | NCTV, Cybersecuritybeeld Nederland 2025, 26 November 2025 | Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures) | 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025 |
| Known via police reports — 76 | 76 ransomware incidents known via police reports (2024) | NCTV, Cybersecuritybeeld Nederland 2025, 26 November 2025 | Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures) | 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025 |
| Known via incident response companies — 20 | 20 ransomware incidents known via incident response companies (2024) | NCTV, Cybersecuritybeeld Nederland 2025, 26 November 2025 | Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures) | 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025 |
| Total notifications received — 1,430 | 1,430 data breach notifications from cyberattacks (2024) | NCTV, Cybersecuritybeeld Nederland 2025, 26 November 2025 | Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures) | 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025 |
| Notifications investigated — 853 | 853 investigated data breach notifications from cyberattacks (2024) | NCTV, Cybersecuritybeeld Nederland 2025, 26 November 2025 | Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures) | 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025 |
| Investigated notifications involving ransomware — 112 | 112 investigated cyberattack data-breach notifications involving ransomware (2024) | NCTV, Cybersecuritybeeld Nederland 2025, 26 November 2025 | Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures) | 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025 |
| Ransomware share of investigated notifications — 13% | 13% percent of investigated cyberattack data-breach notifications involving ransomware (2024) | NCTV, Cybersecuritybeeld Nederland 2025, 26 November 2025 | Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures) | 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025 |
| Of known ransomware attacks (at least) | 53% percent of ransomware attacks involving data theft (minimum, 2024) | NCTV, Cybersecuritybeeld Nederland 2025, 26 November 2025 | Netherlands NCTV CSBN 2025 historical ransomware and cyberattack data-breach notification context (2024 figures) | 2024 ransomware and cyberattack data-breach notification context reported in CSBN 2025 |