Cyber Incident Victim: International Criminal Court
Date:
Jun 2025
Location:
Netherlands
Summary
The International Criminal Court reported detecting a new sophisticated and targeted cybersecurity incident late last week that has since been contained. This marks the second such attack on the court in recent years, following a previous breach that disrupted its systems for weeks and whose details were never disclosed. The court, currently under heightened scrutiny after issuing arrest warrants for Israeli and Russian leaders, provided no further information about the latest incident.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 3 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On Monday, June 30, 2025, the International Criminal Court announced that it had detected a new, sophisticated and targeted cybersecurity incident late the previous week and that the incident had since been contained. The court described the event as the second of its type in recent years, referencing a prior cyberattack that occurred in 2023. In its statement, the ICC said it had identified the breach quickly and taken steps to isolate affected systems, though it did not disclose the specific methods used or the extent of any data exposure. The 2023 incident, which the court also acknowledged publicly, had resulted in the organization being disconnected from most internet‑accessible systems for several weeks while it worked to restore normal operations. No technical details or attribution were released for either the 2023 breach or the latest event.
The announcement was made in a statement provided to Reuters by the court’s press office. The ICC noted that the latest containment meant that normal court functions could resume, although it did not elaborate on any lingering impacts on case management or internal communications. The court’s statement came amid heightened public attention following its issuance of an arrest warrant in November 2024 for Israeli Prime Minister Benjamin Netanyahu on allegations of war crimes and crimes against humanity related to the Gaza conflict, and a separate warrant for Russian President Vladimir Putin concerning the alleged deportation of children from Ukraine. Both Russia and Israel are not states parties to the ICC and have publicly rejected the court’s jurisdiction over their officials. The ICC declined to provide further specifics about the cybersecurity incident, including any potential motives or the identity of the actors involved.