Dutch cybersecurity firm warns of rising data requests from prosecutors

Cybersecurity firm Eye Security, based in The Hague, has raised concerns about the growing number of requests for information from the Public Prosecution Service (OM). “When the OM demands confidential investigation data from incident response companies that help victims, it puts the foundations of our work under pressure,” CEO Job Kuijpers wrote in a LinkedIn post, which the financial newspaper FD also reported on Wednesday.

“We are seeing these information requests from the Public Prosecution Service more and more often. Several cybersecurity companies are experiencing this problem,” said Kuijpers. The company declined to say which incident the information request concerned or how often information is requested. Eye Security is one of the largest cybersecurity companies in the Netherlands.

Kuijpers said victims of cyberattacks need to be able to share every detail of an incident with his company, including any mistakes made. “Including what went wrong. That openness is essential to stopping attacks, limiting damage and preventing them from happening again.”

However, Kuijpers warns that frequent government requests for information from cybersecurity companies could discourage people from being open with them. “On top of that come legal costs, administrative burdens and pressure on client relationships.”

Kuijpers is calling on the Cabinet to engage with the industry on “clear safeguards for confidential incident data and proportionate data requests.”

The OM does not have figures on the number of information requests it makes. “But the number of cybercrime investigations is increasing, so logically, the number of requests to cybersecurity companies is also rising. These may include log data that can provide insight into a cyberattack,” the service said.

Eye Security says its incident response team handled more than 343 confirmed active cyber incidents in 2025. The company investigates attacks, helps contain threats, and analyses digital evidence to establish how attackers gained access and what systems were affected.