{
  "id": "38ad431f-e173-4570-8b17-3bf37b940ec6",
  "url": "https://politico.eu/article/train-cable-fire-nato-summit-fears-sabotage-netherlands-david-van-weel-security-cyberattack-russia",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)",
  "country": "Netherlands",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "NATO Summit",
    "Netherlands",
    "sabotage",
    "cyberattacks",
    "train disruption",
    "NoName057(16)",
    "Dutch Justice Minister",
    "Recorded Future",
    "critical infrastructure",
    "offensive cyber operations"
  ],
  "nodes": [
    "Node 1: Borders"
  ],
  "countries": [],
  "where_text": "Land",
  "headline": "Train cable outage near NATO summit sparks fears of sabotage",
  "description": "Dutch authorities are investigating a major disruption to train traffic in the Netherlands caused by a power outage early on Tuesday that damaged around 30 cables near Schiphol airport, located 50 kilometers from the NATO summit venue. The disrupted cables impacted trains running from Amsterdam, Schiphol, and Utrecht stations during the opening days of the NATO summit. Dutch Justice Minister David van Weelden stated that the disruption 'could be sabotage.' Cyber authorities suspect the pro-Russian hacker group NoName057(16), which has targeted NATO countries in the past, may be responsible. Additionally, Dutch municipalities experienced a series of low-level cyberattacks earlier. Officials and the Dutch railway provider ProRail are still investigating the incident. Threat intelligence firm Recorded Future warned that the NATO summit was expected to draw intense interests from Russian and Chinese threat operatives, aiming at espionage and sabotage.",
  "summary_short": "A power outage impacting train cables near Schiphol airport in the Netherlands on July 11, 2023, disrupted train services during the NATO summit opening, raising suspicions of sabotage by a pro-Russian hacker group.",
  "summary_extended": "On July 11, 2023, Dutch authorities investigated a significant train disruption caused by a power outage that damaged about 30 cables near Schiphol airport, 50 km from the NATO summit venue. The incident affected train routes from Amsterdam, Schiphol, and Utrecht amid NATO leaders' meetings. Dutch Justice Minister David van Weelden indicated sabotage as a probable cause. The pro-Russian hacker group NoName057(16), known for attacking NATO countries including Belgium and Romania, is suspected. Dutch municipalities faced preceding low-level cyberattacks, though no data breaches were confirmed. The Dutch railway provider ProRail and officials are still investigating. Recorded Future intelligence warned of heightened risk during the summit from Russian and Chinese espionage and sabotage operations targeting defense infrastructure and logistics. The event combines physical infrastructure damage and cyber threat dimensions, aligning with hybrid warfare tactics targeting NATO.",
  "actor_primary": "NoName057(16)",
  "target_primary": null,
  "location_text": "Near Schiphol Airport, Netherlands",
  "location_region": null,
  "location_coordinates_lat": 52.3105,
  "location_coordinates_lon": 4.7683,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article explicitly states that Dutch authorities are investigating sabotage after a disruptive train cable fire near Schiphol airport coinciding with the NATO summit. It identifies a known pro-Russian hacker group as a suspect and cites official statements and intelligence assessments, supporting aggressor classification. As no specific defensive measures are described, defense prep classification is omitted.",
  "event_time_utc": "2023-07-11T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "exact",
  "created_at": "2026-02-26T19:57:00.028Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "exact",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

{
  "id": "38ad431f-e173-4570-8b17-3bf37b940ec6",
  "url": "https://politico.eu/article/train-cable-fire-nato-summit-fears-sabotage-netherlands-david-van-weel-security-cyberattack-russia",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)",
  "country": "Netherlands",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "NATO Summit",
    "Netherlands",
    "sabotage",
    "cyberattacks",
    "train disruption",
    "NoName057(16)",
    "Dutch Justice Minister",
    "Recorded Future",
    "critical infrastructure",
    "offensive cyber operations"
  ],
  "nodes": [
    "Node 1: Borders"
  ],
  "countries": [],
  "where_text": "Land",
  "headline": "Train cable outage near NATO summit sparks fears of sabotage",
  "description": "Dutch authorities are investigating a major disruption to train traffic in the Netherlands caused by a power outage early on Tuesday that damaged around 30 cables near Schiphol airport, located 50 kilometers from the NATO summit venue. The disrupted cables impacted trains running from Amsterdam, Schiphol, and Utrecht stations during the opening days of the NATO summit. Dutch Justice Minister David van Weelden stated that the disruption 'could be sabotage.' Cyber authorities suspect the pro-Russian hacker group NoName057(16), which has targeted NATO countries in the past, may be responsible. Additionally, Dutch municipalities experienced a series of low-level cyberattacks earlier. Officials and the Dutch railway provider ProRail are still investigating the incident. Threat intelligence firm Recorded Future warned that the NATO summit was expected to draw intense interests from Russian and Chinese threat operatives, aiming at espionage and sabotage.",
  "summary_short": "A power outage impacting train cables near Schiphol airport in the Netherlands on July 11, 2023, disrupted train services during the NATO summit opening, raising suspicions of sabotage by a pro-Russian hacker group.",
  "summary_extended": "On July 11, 2023, Dutch authorities investigated a significant train disruption caused by a power outage that damaged about 30 cables near Schiphol airport, 50 km from the NATO summit venue. The incident affected train routes from Amsterdam, Schiphol, and Utrecht amid NATO leaders' meetings. Dutch Justice Minister David van Weelden indicated sabotage as a probable cause. The pro-Russian hacker group NoName057(16), known for attacking NATO countries including Belgium and Romania, is suspected. Dutch municipalities faced preceding low-level cyberattacks, though no data breaches were confirmed. The Dutch railway provider ProRail and officials are still investigating. Recorded Future intelligence warned of heightened risk during the summit from Russian and Chinese espionage and sabotage operations targeting defense infrastructure and logistics. The event combines physical infrastructure damage and cyber threat dimensions, aligning with hybrid warfare tactics targeting NATO.",
  "actor_primary": "NoName057(16)",
  "target_primary": null,
  "location_text": "Near Schiphol Airport, Netherlands",
  "location_region": null,
  "location_coordinates_lat": 52.3105,
  "location_coordinates_lon": 4.7683,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article explicitly states that Dutch authorities are investigating sabotage after a disruptive train cable fire near Schiphol airport coinciding with the NATO summit. It identifies a known pro-Russian hacker group as a suspect and cites official statements and intelligence assessments, supporting aggressor classification. As no specific defensive measures are described, defense prep classification is omitted.",
  "event_time_utc": "2023-07-11T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "exact",
  "created_at": "2026-02-26T19:57:00.028Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "exact",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}