Data Protection Authority imposes fine on HAN
In September 2021, HAN was hacked, resulting in a data breach. HAN immediately reported this to the Dutch Data Protection Authority; on 17 December 2025, the Data Protection Authority announced the amount of the fine.
We are pleased that we have finally been able to conclude this matter, and we understand that a fine is part of this. HAN will not appeal this decision, as we have reached an agreement with the Data Protection Authority. The amount of the fine was determined by the Data Protection Authority.
HAN has always taken, and continues to take, the security of its systems seriously. Although HAN already had security measures in place – as also established by the Data Protection Authority – the existing measures proved not to be sufficient in all cases. HAN regrets this, has made improvements, and continuously monitors its security in accordance with national frameworks.
HAN is committed to helping other organizations learn from the mistakes that were made. For example, we have on several occasions held information sessions for companies and organizations to raise awareness of the importance of strong security measures, and we will continue to do so. We also intend to organize a conference in 2026. The plans for this have yet to be developed.