Blogs / 

A doubling of ransomware attacks involving data theft

IT, Privacy & Cybersecurity

17 July 2025

Written by

Natascha van Duuren

Blog Image

The number of data theft incidents by cybercriminals nearly doubled in 2024, according to the Dutch Data Protection Authority. Data theft has a major impact on victims and undermines trust in organizations, the economy, and society as a whole.

What can you do to prevent account takeovers and data breaches, according to the Dutch Data Protection Authority (AP)?

The AP estimates that in 2024, five million people fell victim to a cyberattack. While in 2023 at least 24% of ransomware attacks involved data theft, in 2024 that figure rose to at least 53%.

Cybercriminals can use stolen (financially) sensitive data to extort organizations or their customers. Additionally, victims’ identities may be stolen; in 2024, over 7,000 citizens reported (potential) identity fraud. In its report, the AP rightly emphasizes the importance of organizations knowing what data they collect and what data is shared with other parties. Even when data is shared with third parties, the organization remains responsible for its security. Therefore, maintain control over your data and its protection!

Research by the AP shows that 40% of the organizations investigated had a cybersecurity policy in place, but it was either not properly implemented or lacked adequate oversight. Many organizations are therefore insufficiently protected against digital threats. The AP urges organizations to develop cybersecurity policies and ensure proper execution.

The AP has issued several recommendations to reduce the risk of account takeovers and resulting data breaches:

  • Monitor suspicious login attempts and activities;
  • Critically assess the processing and storage of data – delete what is no longer needed;
  • Prevent account takeovers by enabling multi-factor authentication (MFA);
  • Regularly review data security measures.

Questions?

Are you fully prepared for a cyberattack? Or have you been affected and need legal assistance with the aftermath? Please contact Natascha van Duuren, Partner & Attorney at law specializing in IT, Privacy & Cybersecurity.

Newsletter

Would you like to receive a monthly overview of updates and blogs in your inbox? Subscribe to our newsletter!