:

NETHERLANDS SEIZES 800 SERVERS FROM HOSTING FIRM

SECURITY DESK2 MIN READ
FRI, MAY 22, 2026

■ AI-SUMMARIZED FROM 3 SOURCES ▸ TIMELINE

Dutch financial crime investigators arrested two men and confiscated 800 servers from a web hosting company accused of enabling cyberattacks, interference operations, and disinformation campaigns.

The Netherlands' Financial Crime Office (FIOD) executed the operation targeting the hosting firm, which allegedly provided infrastructure for malicious cyber activity. The seizure represents a significant disruption to operations that leveraged the servers for coordinated attacks and information warfare. Authorities determined the company knowingly facilitated cyberattacks and allowed its platforms to be used for spreading disinformation. The scale of the operation—involving hundreds of servers—indicates the extent of infrastructure available for coordinated malicious activity. The two arrests mark the criminal accountability phase of the investigation. Investigators have been examining how the hosting company operated and what safeguards, if any, were in place to prevent misuse of its services. This seizure aligns with increased enforcement against enabling infrastructure used in cyber operations. Law enforcement agencies across Europe have prioritized identifying and shutting down hosting providers that deliberately ignore evidence their services support criminal activity. The specific nature of the cyberattacks and disinformation campaigns has not been detailed publicly. However, such operations typically target government institutions, critical infrastructure, or public opinion through coordinated false information. The action demonstrates coordination among Dutch authorities to combat cybercrime at the infrastructure level rather than addressing individual attack incidents. By removing the underlying hosting capability, investigators aim to degrade the operational capacity of threat actors relying on these servers. Further investigation will determine whether additional charges apply and what jurisdictions may be affected by the hosting firm's activities. The case underscores the importance of hosting providers implementing strict abuse prevention policies and reporting mechanisms.

■ SOURCES

Bleeping ComputerKrebs on SecurityHacker News

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Cybercriminals have transformed DDoS attacks into a polished, commercialized service complete with pricing tiers, customer support, and reseller programs. The DDoS-as-a-Service market has evolved from basic tools into sophisticated attack platforms.

9H AGOIndustry Desk

Microsoft faced backlash after threatening a security researcher with criminal investigation, reigniting debate over software vulnerability disclosure practices and corporate responsibility.

9H AGOSecurity Desk

Google is deploying Device Bound Session Credentials (DBSC) to all Chrome users, a security feature designed to prevent account takeovers by protecting session cookies from theft.

9H AGOIndustry Desk

Dutch authorities have dismantled a major botnet comprising 17 million infected devices and seized over 200 servers hosting the operation at a local provider.

9H AGOSecurity Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.