NETHERLANDS SEIZES 800 SERVERS FROM HOSTING FIRM
SECURITY DESK■ 2 MIN READ
FRI, MAY 22, 2026■ AI-SUMMARIZED FROM 3 SOURCES ▸ TIMELINE
Dutch financial crime investigators arrested two men and confiscated 800 servers from a web hosting company accused of enabling cyberattacks, interference operations, and disinformation campaigns.
The Netherlands' Financial Crime Office (FIOD) executed the operation targeting the hosting firm, which allegedly provided infrastructure for malicious cyber activity. The seizure represents a significant disruption to operations that leveraged the servers for coordinated attacks and information warfare.
Authorities determined the company knowingly facilitated cyberattacks and allowed its platforms to be used for spreading disinformation. The scale of the operation—involving hundreds of servers—indicates the extent of infrastructure available for coordinated malicious activity.
The two arrests mark the criminal accountability phase of the investigation. Investigators have been examining how the hosting company operated and what safeguards, if any, were in place to prevent misuse of its services.
This seizure aligns with increased enforcement against enabling infrastructure used in cyber operations. Law enforcement agencies across Europe have prioritized identifying and shutting down hosting providers that deliberately ignore evidence their services support criminal activity.
The specific nature of the cyberattacks and disinformation campaigns has not been detailed publicly. However, such operations typically target government institutions, critical infrastructure, or public opinion through coordinated false information.
The action demonstrates coordination among Dutch authorities to combat cybercrime at the infrastructure level rather than addressing individual attack incidents. By removing the underlying hosting capability, investigators aim to degrade the operational capacity of threat actors relying on these servers.
Further investigation will determine whether additional charges apply and what jurisdictions may be affected by the hosting firm's activities. The case underscores the importance of hosting providers implementing strict abuse prevention policies and reporting mechanisms.
■ MORE FROM THE SECURITY DESK
Cybercriminals have transformed DDoS attacks into a polished, commercialized service complete with pricing tiers, customer support, and reseller programs. The DDoS-as-a-Service market has evolved from basic tools into sophisticated attack platforms.
9H AGO— Industry Desk
Microsoft faced backlash after threatening a security researcher with criminal investigation, reigniting debate over software vulnerability disclosure practices and corporate responsibility.
9H AGO— Security Desk
Google is deploying Device Bound Session Credentials (DBSC) to all Chrome users, a security feature designed to prevent account takeovers by protecting session cookies from theft.
9H AGO— Industry Desk
Dutch authorities have dismantled a major botnet comprising 17 million infected devices and seized over 200 servers hosting the operation at a local provider.
9H AGO— Security Desk