Cyber Incident Victim: Katholiekamersfoort.nl
Date:
Jun 2026
Location:
Netherlands
Summary
The church website's network was breached by the Stormous ransomware group. The incident involved a Dutch church website, as indicated by the .nl domain. The breach resulted in the exfiltration of data that was subsequently offered for sale. Stormous claimed responsibility for the attack and advertised the stolen data as available for purchase.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 0 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On June 9, 2026, the ransomware tracking site ransomware.live listed Katholiekamersfoort.nl as a recent victim of a cyberattack. The entry was timestamped as discovered yesterday relative to the article date of June 10, 2026. The listing identifies the victim as the website of a church located in Amersfoort, Netherlands, using the domain katholiekamersfoort.nl. The source of the information is the ransomware.live feed, which aggregates reports of ransomware and data breach incidents. No additional contextual details about the organization’s size or operations are provided in the source.
The attack is attributed to the threat actor group known as Stormous, according to the same listing. The description states that the church website's network was breached, resulting in the exfiltration of data. The entry is marked with an “UPDATE‑FOR SALE” tag, indicating that the stolen data was being offered for sale at the time of the report. No further details about the specific systems compromised, the volume of data taken, or the types of information exfiltrated are provided in the source.
Because the source material does not include any information about detection methods, containment steps, or remediation efforts undertaken by the victim, no narrative of response actions can be constructed from the available evidence. The impact is limited to the confirmed exfiltration of data and the indication that the data was being marketed for sale. The article concludes with the statement that the breach resulted in exfiltration, leaving any additional consequences unspecified.