Chinese hacking group Salt Typhoon targets Dutch internet providers

Dutch intelligence agencies have confirmed that the state-sponsored Chinese hacking organisation Salt Typhoon carried out attacks on Dutch internet providers.

According to Dutch media, the MIVD (General Intelligence and Security Service) and AIVD (General Intelligence and Security Service) reported that smaller providers and hosting companies were compromised, with hackers gaining access to routers but not to internal networks.

The warnings from Dutch intelligence align with earlier alerts from U.S. agencies, including the NSA, CISA, and FBI, regarding Salt Typhoon’s global cyber espionage campaign. European partners in Germany, Finland, the United Kingdom, and Italy have also expressed support for this coordinated response.

The joint international effort highlights the global nature of modern cyber threats. By sharing intelligence, countries can respond faster and develop coordinated countermeasures against attacks that occur simultaneously in different regions.

According to the Dutch Ministry of Defence, Salt Typhoon specifically targeted the Netherlands as part of its worldwide campaign against telecommunications companies that began in late 2024. Unlike the United States, where major telecom companies were affected, the hackers focused on smaller ISPs and hosting providers in the Netherlands.

Investigations by MIVD and AIVD revealed that while the hackers gained access to routers, they did not penetrate the internal networks of the affected organisations. Where possible, threat information was shared with impacted providers in collaboration with the National Cyber Security Centre (NCSC) to help mitigate risks, although complete elimination of threats cannot be guaranteed.

The Ministry of Defence emphasised that Chinese cyber activities have become increasingly sophisticated. “These activities have become so advanced that continuous effort and attention are required to detect and remedy cyber operations against Dutch interests in a timely manner,” the ministry said.

Dutch intelligence services warned that these operations present a significant challenge to the country’s digital resilience. The constant evolution of hacking techniques necessitates ongoing vigilance from both government agencies and private-sector organizations.

By Tamilla Hasanova