The Dutch General Intelligence and Security Service (AIVD) released its annual report for the year 2025 on April 23, Thursday. The report highlighted the significant unpredictability in the world order, stating that the Netherlands is facing its most severe national security threats since the end of World War II, with pressures mainly coming from Russia and the Chinese Communist Party.
According to the report released in Dutch by the AIVD, the Netherlands faced multiple threats to its national security and democratic rule of law in 2025. These threats included foreign espionage activities attempting to gather intelligence and influence the Netherlands, the continuous expansion and deepening of threats from the Chinese Communist Party, Russia’s preparations for long-term confrontation with the West, and the increasing threat to national security posed by cyberattacks, among other concerns.
During the AIVD’s annual report release event, Director Simone Smit stated, “In our 80 years of existence, we have never seen such a level of threats – national security is under pressure from multiple fronts simultaneously, and for such a prolonged period.”
“We are witnessing an unstable and unpredictable world order, whereas stability and predictability have been the foundation of prosperity and peace for the past few decades.”
The AIVD is responsible for the national security of the Netherlands, defined by six major security interests including territorial security, physical security, economic security, ecological security, societal and political stability, and international rule of law and stability.
The new report analyzed the threats posed by China and Russia to the security interests of the Netherlands.
When the United States announced tariff increases, China responded by imposing tariffs on American products and later restricting exports of rare earth metals. The report indicated that China used this opportunity to demonstrate other countries’ dependence on its supply chain.
In 2025, China also utilized this dependency as a tool to counter the United States and Europe. This reliance carries risks that could threaten the economies of Europe and the Netherlands, as well as the Netherlands’ ability to make independent strategic decisions.
Joint investigations by the AIVD and the Military Intelligence and Security Service of the Netherlands (MIVD) revealed China’s continued focus on Western advancements in high-end technology, utilizing various means to acquire such technologies. The report stated that this sustained interest in high-end technology, coupled with economic dependence, broadened the threats emanating from China.
China also engaged in cyberattacks to obtain knowledge essential for promoting economic development, with its cyber activities extending beyond purely economic targets. AIVD pointed out that the scale of China’s cyber threats often exceeded initial estimates.
While not directly attributing all cyberattacks to the Chinese government, AIVD and MIVD found a vast ecosystem involving attackers, businesses, and state institutions contributing to the initiation, support, and execution of cyberattacks.
Certain Chinese cyber groups have long targeted Europe, NATO, and the Netherlands. Additionally, opportunistic factors may occasionally influence cyberattacks, such as when new system vulnerabilities are discovered, leading to rapid global spread and potential victimization of the Netherlands.
These Chinese cyber-attacks not only steal valuable information but could also be used to establish capabilities for disruption in future conflicts. China’s vast and technically sophisticated cyber programs may prevent timely detection and prevention of cyberattacks against the Netherlands and its allies.
The report emphasized that “the threats posed by China are not only expanding but deepening.”
As an example cited in the report, in the summer of 2025, AIVD, MIVD, and multiple intelligence and cybersecurity organizations jointly issued a warning about the Chinese cyber group “SALT TYPHOON,” which stole large amounts of information from telecommunications systems in the United States and the Netherlands, remaining undetected for nearly two years.
On the other hand, Chinese intelligence and security agencies are active within the Netherlands. The Chinese government implements the “whole-of-society approach,” enabling the mobilization of the entire social system, from individuals to businesses, to engage in intelligence activities, backed by legal obligations. In the Netherlands, China may exploit the Chinese community (sometimes through pressure or coercion) to conduct espionage activities.
The report suggested that Russia integrates cyber warfare, espionage, sabotage, and political influence to sustain long-term confrontation with the West, with Ukraine being just a part of its focus.
Currently, Ukraine remains the highest priority target for Russian cyber disruption, particularly in energy infrastructure and logistics systems. After the conclusion of the Russia-Ukraine conflict, Russia’s attack focus may shift towards the Netherlands and other NATO and EU countries.
Given the extensive support the Netherlands provides to Ukraine and its status as a key transport and information hub in Europe, Russia also considers the Netherlands a potential target for disruptive activities, whether digital or physical.
In 2025, cyberattacks from Russia attempted global intrusions on communication tools such as Signal and WhatsApp, targeting military officers, officials, and high-ranking individuals. The report mentioned that some Dutch government accounts had been compromised or taken over, allowing attackers to masquerade as the compromised victims and communicate with their contacts.
The report also noted multiple instances of unmanned aircraft near critical Dutch infrastructure in 2025, although confirmation of these drones’ origins from Russia remains unverified. Moreover, not all drones pose a threat.
Earlier on Tuesday, the Military Intelligence and Security Service of the Netherlands (MIVD) released its annual threat report, focusing on Chinese cyber espionage targeting Western defense industries.