DDoS attack on DigiD exposes fragility of Dutch government login backbone

biometricupdate.com/…/ddos-attack-on-digid-expose…

A distributed denial-of-service attack on DigiD disrupted access to Dutch government and public-service logins on 30 October 2026, a day before quarterly VAT returns were due. Logius says no personal data was exposed and that a police report has been filed. The article reports earlier attacks, declining availability from 99.93% in 2024 to 99.57% through August 2026, criticism of scheduled maintenance, and a possible 2027 trial for hosting critical infrastructure on a sovereign government cloud.