The Silent Compromise of Dutch Judicial Systems

Briefing: Cyberattack and Data Breach at the Dienst Justitiële Inrichtingen (DJI)Executive SummaryThe Dienst Justitiële Inrichtingen (DJI), the Dutch agency responsible for prisons and TBS (forensic psychiatric) clinics, has been targeted by a significant cyberattack. Investigative platform Argos reports that criminal hackers exploited a vulnerability in the Ivanti Endpoint Manager Mobile system, which is used for the remote management of business-issued mobile devices such as phones and laptops.The breach has exposed sensitive employee information, including email addresses, phone numbers, and potentially historical location data. The incident is particularly critical due to the nature of the DJI’s work; compromised employees interact daily with criminals and psychiatric patients, making them vulnerable to blackmail, threats, and harassment. Experts warn that the attackers may have established persistent access through administrative "backdoors," making total system remediation exceptionally difficult.