Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
2026-05-26T07:23:27Z•dbf9b4ec776a7f6effb63c1b9a495474c2b2d99a7f40dbd43071e615653d89df
AWS GovCloudCISACanvasDDoSGitHub exposureKimwolfRussiaStark Industries Solutionsbotnetcredential leakagedata extortiondata leakeducation sectorhosting abuselawmakers inquirynation-state activitypatchesserver seizuresupply chainzero-day
What happened
A batch of KrebsOnSecurity reports detail a string of high-impact cyber incidents: Dutch authorities seized ~800 servers and arrested two hosting co-owners for operating infrastructure tied to Russian cyberattacks and influence operations (linked to sanctioned ISP Stark Industries Solutions); a CISA contractor publicly exposed AWS GovCloud credentials and internal build/deploy docs on GitHub, prompting Congressional inquiries; a 23-year-old alleged Kimwolf botnet operator was arrested and charged in Canada and the U.S.; and a data-extortion attack against the Canvas education platform risked /
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- dbf9b4ec776a7f6effb63c1b9a495474c2b2d99a7f40dbd43071e615653d89df
- Enrichment time
- 2026-05-26T07:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.