Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
2026-05-27T19:23:27Z•245a2cd9d82ab6dd585e4df65ec082b14c1426f5bdfc1950cecf449eb2a8619f
AWS GovCloudCISACanvasDDoSKimwolfMicrosoft Office tokensPatch TuesdayRussiaScattered Spiderarrestsbotnetcredentials leakagedata breachdata-extortioneducation sectorhosting abusenation-state activityroutersserver seizuresvulnerabilities
What happened
A cluster of high-impact cyber incidents and law-enforcement actions: Dutch authorities seized some 800 servers and arrested two co-owners of hosting firms accused of enabling Russia-linked cyber operations and influence campaigns; a CISA contractor publicly exposed highly privileged AWS GovCloud credentials and internal agency build/deploy data on GitHub, prompting congressional inquiries and breach containment efforts; a 23-year-old alleged Kimwolf botnet operator was arrested and charged in Canada and the U.S.; a large data-extortion attack against the Canvas education platform threatened /
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 245a2cd9d82ab6dd585e4df65ec082b14c1426f5bdfc1950cecf449eb2a8619f
- Enrichment time
- 2026-05-27T19:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.