Coöperatieve Rabobank U.A.

Summary

Rabobank experienced a cyber attack disrupting customer access to its online and mobile banking services, including iDeal, following similar incidents targeting rival banks ABN Amro and ING in rapid succession. The attack, identified as a distributed denial-of-service (DDoS) incident, overwhelmed servers with excessive traffic, temporarily crippling digital platforms. The Dutch tax office also faced a brief parallel disruption. While the earlier attacks occurred over a weekend, services at all three financial institutions were restored by the following Monday morning.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Rabobank experienced a significant cyber attack on the morning of January 29, 2018, marking the third consecutive day of disruptive incidents targeting major Dutch financial institutions. This attack occurred shortly after weekend assaults against competitors ABN Amro and ING, with the Dutch tax office also suffering a temporary attack earlier that Monday. The coordinated timing of these incidents created widespread disruption across the country's financial infrastructure. Rabobank customers encountered immediate difficulties accessing online banking portals, mobile banking applications, and the iDeal payment processing system during the attack window. Technical analysis confirmed the incident as a distributed denial-of-service (DDoS) attack, a method involving overwhelming targeted servers with artificially inflated traffic volumes to render services unreachable. The bank's digital platforms became partially or completely inaccessible during the attack period, mirroring the operational challenges previously faced by ABN Amro and ING during their weekend outages.

The operational impacts mirrored those experienced by Rabobank's competitors, with customers unable to conduct routine financial transactions through digital channels during the service disruption. ABN Amro and ING had successfully restored normal operations by Monday morning following their weekend incidents, though specific recovery timelines for Rabobank's systems were not disclosed in available reporting. The consecutive nature of these attacks across multiple financial institutions and government entities within a 72-hour period demonstrated an organized targeting of critical Dutch economic infrastructure. No customer data breaches or financial losses were explicitly linked to the DDoS incidents in the reporting. The attacks collectively highlighted systemic vulnerabilities to high-volume traffic assaults within the national banking sector's digital infrastructure during this period.

Sources

Sources available to members: 1 source.