What is happening at the Public Prosecution Service?
The Public Prosecution Service disconnected its internal systems from the internet on July 17 as a precaution. The Public Prosecution Service has gone offline. This was prompted by reports from the National Cyber Security Centre (NCSC) about vulnerabilities in the widely used Citrix systems, and based on the information known so far, the signal that this may have been exploited.
How is the Public Prosecution Service working on a solution?
As part of crisis management, various teams are active. The Incident Response Team (IRT) is investigating the technical consequences of what has happened. This investigation is partly focused externally - how can one access the Public Prosecution Service environment from outside? - and partly internally: if someone has been inside, what can happen? The Business Impact Team (BIT) is investigating and proposing solutions to keep work going as well as possible, and the Business Recovery Team (BRT) is preparing to restore the Public Prosecution Services service provision. This includes restoring and possibly rebuilding the entire technical infrastructure. There is also the Business Team, which looks at our primary processes, such as data exchange with partners like the Judiciary, the CJIB, and Victim Support Netherlands. In short, various levels have worked closely together to address this crisis, seek solutions, and work towards returning to normal.
How long will it take before the Public Prosecution Service is reconnected to the internet?
The investigation into the vulnerability in the Citrix environment is complex and ongoing. Gradually, it is being assessed when which digital systems can be safely restarted, and in what manner. This is complicated and takes time.
Does the Public Prosecution Service already have an idea of what the consequences may be?
The Public Prosecution Service can only say with certainty whether there are consequences for the data once the investigation gives reason to do so.
Is there a criminal investigation underway?
Yes. The criminal investigation is led by the National Public Prosecutors Office. The Public Prosecution Service has also reported to the Personal Data Authority regarding a possible data breach.
What is the impact on criminal cases, hearings, and other activities of the Public Prosecution Service?
Efforts are being made to continue all activities as well as possible. Emergency processes are being followed, and various temporary methods are being developed in collaboration with chain partners. Prosecutors can access case systems, which means they can read and print criminal files. For contacts and appointments with lawyers, each district is looking for the best possible solutions and working on national agreements.
Will all court cases proceed, or will hearings also be canceled or postponed?
Efforts are being made to allow as many hearings as possible to proceed. It is currently unclear how many cases will not be able to go ahead. An inventory is being made.
Regarding (super)fast justice; the already planned (super)fast justice hearings will proceed. Each district is assessing whether new (super)fast justice hearings can be scheduled. In the current situation, given the speed of the process, this is not easily achievable everywhere. If hearings cannot proceed, it does not mean that these cases will be dismissed. They will be handled in the usual way, for example, via a police judge hearing.
Is the Public Prosecution Service reachable?
Yes. The Public Prosecution Service is reachable by phone. The so-called customer contact centers (KCC) of the districts are accessible.
The press officers of the various districts are reachable by phone. The press office of the Public Prosecutors Office is currently handling all communication on this matter.
Furthermore, Public Prosecution Service employees are of course reachable via their mobile phones for their contacts. Public Prosecution Service employees are not reachable by email. Emails do not get through, not even later when the Public Prosecution Service is reconnected to the internet.