Acm cybersecurity incidents and threat signals

May 22, 2026Misconfiguration or publishing error

Medium

Dutch civil servants from Authority for Consumers and Markets (ACM) affected by Microsoft data leak

Microsoft accused of leaking Dutch civil servants' names to U.S. government Microsoft has reportedly shared the names of Dutch civil servants working for two regulatory agencies with the U.S. House of Representatives. The agencies involved include the Authority for Consumers and Markets (ACM) and the Dutch Data Protection Authority (AP), according to an article published on Friday by Vrij Nederland. The civil servants involved are working on implementing the Digital Services Act (DSA), the European law that forces online platforms to take stricter action against illegal content, online child sex abuse, and disinformation. The American government considers this law a form of censorship. Microsoft shared emails, minutes, and invitations sent by these civil servants without redacting their names in the documents. American tech companies are required to share data with the U.S. government due to the Cloud Act in force in that country. State Secretary Eric van der Burg of Interior is concerned that Microsoft simply shared civil servants’ names with the U.S. government. But he first wants to investigate how the names were shared and in what documents before drawing conclusions. State Secretary Willemijn Aerdts for Digital Economy and Sovereignty has spoken with the U.S. Ambassador Joe Popolo about the allegations. The D66 politician said this happened some time ago, and she raised the issue with Popolo during her introductory meeting with the ambassador. “I said how undesirable this is. If you have a problem, you fight it out with us or, if necessary, in Europe, but not against the backs of civil servants,” Aerdts told ANP before heading into the Council of Ministers meeting on Friday. There is a broad desire within the Netherlands to become less dependent on major American tech companies , specifically because of the Cloud Act. Both Aerdts and Van der Burg stressed that it will take time for the Netherlands to become digitally sovereign.