News

17 June 2026

𝐎𝐯𝐞𝐫 𝟏𝟒 𝐝𝐚𝐠𝐞𝐧 𝐢𝐬 𝐡𝐞𝐭 𝐳𝐨 𝐯𝐞𝐫!

On 1 July, the Cybersecurity Act comes into force. There is no transition period, so organisations that aren’t ready yet have exactly two weeks left.

Van Tuijl, a Dutch family business that has been in existence for over a hundred years, was recently targeted by LockBit5. Not a tech company, not a multinational. Just a business that has been around for generations.
That is precisely the point.

Under the Cybersecurity Act, some 8,000 Dutch organisations are required to demonstrate that they have taken measures in the areas of risk management, incident reporting and supplier security.

This applies from day one.