In early July 2025, a hack took place at Clinical Diagnostics NMDL in Rijswijk, which performs laboratory analyses on behalf of Bevolkingsonderzoek Nederland. Hackers gained access to the ICT systems and copied data of over 485,000 participants in the population screening for cervical cancer.
According to Bevolkingsonderzoek Nederland, the following data was involved:
An unknown number of participants also have e-mail addresses or phone numbers involved.
Information from Bevolkingsonderzoek Nederland shows that data of 53,516 people has now been published on the dark web. According to media reports, Clinical Diagnostics paid a ransom to prevent further dissemination.
We do not know whose data ended up on the dark web. Would you like to know which of your data was involved in the data breach and whether it also appeared online? If so, we encourage you to contact the organizations involved directly through the official contact points at the bottom of this page.
Because of the many questions and signals we receive, we have set up a special information point. The purpose of this page is to provide information regarding concerns and questions from data subjects, also considering factual and legal developments.
In addition, we inform victims via a weekly newsletter.
We are also investigating whether collective action, for example in the form of a mass claim, is possible. Based on the information that is currently known, it is not yet possible to give a definite answer.
If you want to contact us, you can do so by sending an email to datalek@louwersadvocaten.nl. Due to the large volume of messages we receive, it may take a little longer than you are used to from us before you receive a response. We do our best to inform everyone as carefully and timely as possible.
We publish a newsletter every Thursday with an overview of the latest legal and practical developments surrounding this data breach. Would you like to receive it? Then sign up using the form below.
We only use your data to inform you about this data breach and, if necessary, to contact you. The basis for this is your consent. Your data will not be kept longer than necessary and will not be shared with third parties. You can unsubscribe at any time by sending an e-mail to datalek@louwersadvocaten.nl.
Important: we are currently providing general information and updates. Your registration does not create a personal assignment relationship with our firm.
At this moment we do not have more information than has been shared by the organizations involved. However, we will keep you informed about the legal aspects of this data breach through our newsletter. For the most current information, please consult the sources below:
Bevolkingsonderzoek Nederland
E-mail: vragenBMHK@bevolkingsonderzoeknederland.nl
Phone: 088 266 9000
Clinical Diagnostics NMDL
Below you will find a selection of relevant articles and blogs related to this data breach:
Based on the information that is currently known, it is not yet possible to give a definite answer. For that, it must first be investigated whether there is a violation of applicable legislation, including the AVG. We will keep data subjects informed about this via our newsletter.
We are currently investigating whether collective action on behalf of victims, for example through a mass claim, may be an option. This also depends on further developments and the legal assessment of the data breach. We will communicate about this via our newsletter as soon as there is more clarity.
We send a weekly newsletter with an overview of the latest legal and practical developments surrounding this data breach. Would you like to receive it? Then sign up using the form above.
