The Dutch Data Protection Authority (AP) warns that the rapid development of artificial intelligence (AI) is increasing the risks of phishing and cyberattacks. The regulator urges organisations to “take action now” to strengthen digital security. it adds further that only robust protection can safeguard data against increasingly sophisticated forms of cybercrime.
Last year, the AP recorded a sharp rise in account takeovers. Over a thousand (1,742) cases, up from 607 the year before. Phishing is no longer just a consequence of data breaches, but rather increasingly the cause. Criminals send emails that appear authentic, tricking victims into clicking fake links. This easily allows attackers to take over employee accounts and launch broader cyberattacks.
Convincing
Criminals are using AI to make phishing messages more realistic. By combining AI tools with data from previous breaches, they can craft personalised emails containing names, contact details, and other sensitive information. This makes fraudulent messages harder to distinguish from legitimate communication.
Dual Use
Although AI can help detect cybersecurity vulnerabilities, criminals can use the same technology to identify and exploit them. Because of this, the AP considers it “essential” for organisations to bring their digital protection up to standard. The regulator calls for clear cybersecurity policies and advises against storing data centrally.
Rising Numbers
The AP received 39,407 data breach notifications last year. The number is rising again, though less sharply than in 2024, when 37,839 notifications were filed. Since 2024, organisations have been allowed to report multiple breaches at once, such as incorrectly sent letters, which has contributed to the increase.
Impact on Society
According to the AP, data breaches are causing unrest and practical problems. A leak in the cervical cancer screening programme last year led some people to doubt whether they wanted to participate again. Another breach at the Public Prosecution Service delayed court cases and temporarily prevented civil servants from sending emails. “Due to these types of data breaches, people lose confidence in the digital services provided by companies and governments”, the AP states.
@anp | NEWSBRAINPORT
