The Invisible War: Cyber and Spies
The MIVD tracks Russian hackers in real time, then in 2018 exposes a GRU van outside the OPCW. Defence Cyber Command launches ops; ASML faces tech espionage; Rotterdam hardens against port hacks. Silent battles decide who owns the future.
Episode Narrative
In the aftermath of the Cold War, the world entered a new era of complex international relations. The Dutch military, too, found itself at a crossroads. The 1990s ushered in significant changes as the country shifted its focus from traditional territorial defense to a more nuanced role in international peacekeeping. This transformation was not merely administrative; it marked the dawn of a new identity for the Dutch armed forces. A series of deployments began to redefine how soldiers perceived their mission and roles. The operations in Bosnia and Kosovo laid the groundwork for a "peacekeeping culture." Yet, this shift sparked tensions within the ranks. Many soldiers viewed these missions as less masculine, less valued compared to the direct confrontations of conventional warfare. For them, the image of a soldier evolved from one of a fierce combatant to a peacemaker — a role some found difficult to embrace.
As the new millennium approached, the world witnessed the defining events of September 11, 2001, and its global aftermath. In 2002, the Royal Netherlands Air Force deployed six F-16s to Afghanistan as part of Operation Enduring Freedom. This marked the first major combat air contribution from the Netherlands in the post-9/11 era. The air force's struggle to project its power as a small state in coalition warfare was evident. With limited resources and capabilities, the Dutch military had to forge its identity in a theater dominated by larger forces. The F-16s soaring through the Afghan skies symbolized not just military might but a commitment to counter-terrorism efforts taking place on the global stage.
From 2003 to 2010, Dutch forces led the NATO International Security Assistance Force mission in Uruzgan, Afghanistan. This mission proved to be a double-edged sword. While it fostered international cooperation and reflected the Netherlands’ commitment to global security, it also came at a great cost. Over 25 fatalities and hundreds wounded marked this deployment, igniting heated debates within Dutch society. Questions arose regarding the moral and financial implications of such expeditionary warfare. The national narrative shifted as citizens reflected on what it meant to send their troops into dangerous, uncertain conditions, far removed from the familiar landscapes of home. The specter of loss re-defined public sentiment regarding military engagement.
By 2010, the discussion surrounding the Dutch military intensified. A petition calling for the abolition of the armed forces gained traction, symbolizing a growing wave of skepticism about military legitimacy and public support. The trends evident in Slovenia — as echoed in the criticisms surrounding its defense policies — resonated within the Dutch context, substantiating a broader European sentiment. Were conventional military forces still relevant in a landscape increasingly dominated by hybrid threats.
With the advent of the Syrian Civil War and the rise of the Islamic State, the Netherlands found itself entwined in yet another international crisis. In 2014, Dutch forces joined the international coalition against ISIS, contributing their F-16s to Operation Inherent Resolve. Airstrikes over Iraq became a new focal point, yet this involvement came with its own set of complications. The infamous Hawija bombing in 2015 sparked controversy over civilian casualties and questions of accountability. The Dutch government’s shifting response — from denial to what could be described as “strategic ignorance” regarding the harms inflicted — exposed the profound challenges of accountability in an age where remote warfare was increasingly the norm.
The establishment of the Dutch Defence Cyber Command in 2016 signified a major pivot in military strategy. As cyber threats proliferated, particularly from state actors like Russia, this new front added layers of complexity to national security. No longer just an arena where bullets flew and tanks rolled, the battlefield now encompassed a vast digital landscape where information warfare and espionage reigned.
In 2017, an unprecedented moment of clarity emerged when both the Dutch General Intelligence and Security Service and the Military Intelligence and Security Service attributed the NotPetya cyberattack to Russian military hackers. This was a rare and bold move — an assertion of sovereignty in a domain often shrouded in secrecy and ambiguity. The act of public attribution signaled a new resolve in the face of a rising tide of cyber operations producing real, material impacts.
By the following year, a dramatic incident in The Hague underscored the very real stakes of this new battlefield. Dutch intelligence expelled four Russian GRU officers found engaged in espionage against the Organisation for the Prohibition of Chemical Weapons. The image of a GRU van, uncovered in fine detail by surveillance, represented more than a mere footnote in history. It was a stark reminder of hybrid warfare’s real and present danger on Dutch soil.
The years from 2018 to 2020 saw the Netherlands become a significant theater in the global game of espionage. Strategic advantages were increasingly tied to technological prowess, with Chinese and Russian operatives targeting Dutch semiconductor giant ASML, pivotal to the global chip supply chain. The Dutch security services ramped up their counter-espionage measures, recognizing that defending their critical economic infrastructure was just as vital as protecting their troops on the ground.
Amidst this tumultuous backdrop, Rotterdam's role as Europe’s largest port necessitated advanced cyber defenses. This was no longer just about military presence; it was about securing the future of trade against state-sponsored hacking threats. When the Dutch government published its National Cyber Security Strategy in 2020, it reflected a hard-earned understanding of the emerging threats in the digital age. Resilience became a mantra, encapsulating a commitment to integrate civilian and military efforts in the face of escalating cyber aggression.
Between 2020 and 2025, the MIVD and AIVD sharpened their focus on real-time tracking of Russian cyber operatives. This was an era of collective security, wherein intelligence sharing with NATO allies became essential. By participating in NATO’s first major cyber defense exercise — "Cyber Coalition" — in 2021, Dutch military cyber units tested their protocols against simulated large-scale attacks aimed at critical infrastructure. A new facet of global defense emerged, one where solidarity and collaboration were paramount.
The ripple effects of the war in Ukraine in 2022 demonstrated just how interconnected these modern conflicts had become. The Dutch government pledged increased military support to Ukraine, including vital cyber intelligence sharing. The stakes escalated further, as Dutch cyber defense teams played a crucial role in protecting Ukrainian networks from relentless Russian advances.
In 2023, a shocking revelation emerged — Russian hackers had, repeatedly, probed the networks of Dutch energy companies in a bid to exploit vulnerabilities, particularly during the transition to renewable energy infrastructure. The Dutch Ministry of Defence responded vigorously, announcing a significant expansion of its Defence Cyber Command. This broadened initiative aimed to include civilian tech experts and foster collaborations with universities and the private sector — a recognition that cybersecurity was a collective responsibility, crossing the boundary between military and civilian life.
By 2024, the Netherlands would showcase its commitment to cyber resilience by hosting a multinational cyber defense summit in The Hague. Positioning itself as a hub for cyber diplomacy, the summit aimed to address the escalating digital conflict enveloping European nations.
As 2024 progressed into 2025, Dutch intelligence agencies reported a worrying surge in AI-driven disinformation campaigns targeting their elections and public discourse, with implications pointing toward Russian and Chinese influences. This era marked a different kind of warfare — a war fought not with guns and bullets, but with information, perception, and cognitive dominance. The blurred lines between knowledge and ignorance, trust and manipulation, began to reshape the very fabric of democratic discourse.
The release of a white paper on hybrid threats by the Dutch government crystallized the understanding of contemporary warfare. This document formally integrated cyber, espionage, and influence operations into national defense doctrine. It captured the evolving nature of conflict in a digital age and was both a warning and a roadmap.
As we reflect on these transformative years, the questions loom large: Have we truly adapted to this "invisible war," or do we still cling to the perceived morality of traditional combat? How do we measure the valor of our protectors when their greatest battles are fought behind computer screens, emerging as shadows against flickering lights? The very essence of warfare is evolving, and we must ask ourselves — what does it mean to be secure in a world that increasingly lives in the realm of the unseen? The answer may lie not just in our military strategies, but also in our understanding of humanity itself.
Highlights
- 1991–2010s: The Dutch military’s post-Cold War identity shifts from territorial defense to international peacekeeping, with deployments to Bosnia (SFOR8, 2000) and Kosovo (KFOR2, 1999) shaping a new “peacekeeping culture” that some soldiers perceive as less masculine and less valued than traditional combat roles.
- 2002–2003: The Royal Netherlands Air Force deploys six F-16s to Afghanistan as part of Operation Enduring Freedom, marking the Netherlands’ first major combat air contribution in the post-9/11 era and highlighting the challenges of small-state air power projection in coalition warfare.
- 2003–2010: Dutch forces lead the NATO ISAF mission in Uruzgan, Afghanistan, suffering 25 fatalities and hundreds wounded — a deployment that becomes domestically controversial and leads to a national debate over the costs and purposes of expeditionary warfare.
- 2010: Public debate over the Dutch military’s role intensifies, with a petition calling for abolition of the armed forces and a critical scientific review of Slovenia’s defense (not the Netherlands, but indicative of broader European trends in military legitimacy and public support).
- 2014: The Netherlands participates in the international coalition against ISIS, contributing F-16s to Operation Inherent Resolve; Dutch airstrikes in Iraq, including the 2015 Hawija bombardment, later spark controversy over civilian casualties and official transparency.
- 2015: The Dutch government’s response to the Hawija bombing — shifting from denial to “strategic ignorance” about civilian harm — exemplifies the challenges of accountability in remote, technology-driven warfare.
- 2016: The Dutch Defence Cyber Command (DCC) is formally established, centralizing military cyber operations and signaling a new front in national security as cyber threats from state actors like Russia escalate.
- 2017: The Dutch General Intelligence and Security Service (AIVD) and Military Intelligence and Security Service (MIVD) publicly attribute the 2017 NotPetya cyberattack to Russian military hackers (GRU), marking a rare moment of overt cyber attribution by a European state.
- 2018: Dutch intelligence agencies expel four Russian GRU officers caught attempting to hack the Organisation for the Prohibition of Chemical Weapons (OPCW) in The Hague, exposing a GRU van parked outside the OPCW building — a vivid, real-world example of hybrid warfare tactics on Dutch soil.
- 2018–2020: The Netherlands becomes a key battleground in global tech espionage, with Chinese and Russian operatives targeting Dutch semiconductor giant ASML, a linchpin in the global chip supply chain; the MIVD and AIVD ramp up counter-espionage operations to protect critical economic infrastructure.
Sources
- https://militaryhealth.bmj.com/lookup/doi/10.1136/bmjmilitary-2025-NATO.21
- https://www.semanticscholar.org/paper/777239e39df219529acf0fae3a74d8016f75d336
- https://www.semanticscholar.org/paper/f4e12bc1687d89a9e328699764170ee56a781a28
- https://www.semanticscholar.org/paper/da0ed6cfee938fe18f8009760937c172baee3955
- https://www.semanticscholar.org/paper/01c82647ad1cbd3dc00139b6611658343a2322a1
- https://academic.oup.com/ia/article/94/5/1059/5092073
- https://journals.sagepub.com/doi/10.1177/0020702016641635
- https://doi.apa.org/doi/10.1037/e425052005-001
- https://dk.mors.si/info/images/SVI/PDF/2011_2/SVI2011_2-Brozic-Furlan_editorial.pdf
- https://www.semanticscholar.org/paper/820c580f673b575f0356fa9c1dacfaca2145d68c