Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Fact · impact · reported
The Dutch government took NCSC.nl offline as a precaution, with no active misuse seen yet; Dutch press reported DigiD, MijnOverheid and Overheid.nl offline too
The government's notice names only NCSC.nl; DigiD and MijnOverheid rest on the press (fact-check desk, run 1: holds in part, overstated).
Fact-check
A4 Corroborated●●●●○○ · Event · verdict: holds
Rewritten as the evidence carries it: the government's notice names only NCSC.nl, as a precaution (Finding-27 fixed), and the other services are attributed to the Dutch press, which the TPO capture carries (DigiD, MijnOverheid, the Tweede Kamer). The 'no signs of exploitation of those services' overreach is gone (Finding-28 fixed).
| Capture checked | Result | What it says | sha256 of the text read |
|---|---|---|---|
| rijksoverheid-ncsc-php-news | partial | Vanwege de kwetsbaarheden in PHP is uit voorzorg de website NCSC.NL tijdelijk offline gehaald. | 7e10bcf7cb44e5f7 |
| rijksoverheid-ncsc-php-news | partial | het Nationaal Cyber Security Centrum (NCSC) heeft nog geen actief misbruik gesignaleerd. | 7e10bcf7cb44e5f7 |
| dutchitleaders-websites-offline | blocked | We're verifying you are human. This may take a few seconds. | 28f6003be69e3a97 |
| tpo-nl-digid-offline | carries | DigiD, MijnOverheid, de website van de Tweede Kamer en zelfs die van het Nationaal Cyber Security Centrum (NCSC) gingen uit voorzorg offline. | 2ddfd8817abf25b6 |
| insurancebusiness-uk-councils-met | partial | The Dutch National Cyber Security Centre took its own site offline as a precaution, as did the following: | 89357150e0bc8363 |
| reuters-factbox-websites-offline | carries | They included the Port of Rotterdam, government site Overheid.nl, the national football association KNVB | d562e28995b00a19 |
| rte-reuters-websites-go-dark | carries | including the Port of Rotterdam, government portal Overheid.nl, the national soccer association KNVB | 99bb92662561bd29 |
| ncsc-nl-site | absent | Ernstige kwetsbaarheden in PHP: update nu | 4cff0c7ba341429e |
| overheid-nl-site | absent | nothing that carries it | 93278f942198c318 |
Open tickets: Finding-27, Finding-28, Finding-84.
Graded in Run-3, resting on captures up to 2026-10-22 11:32 UTC. The scale is on the fact-check page.
This fact over time
- 2026-10-21Rijksoverheid / NCSC-NL publishes NCSC: Ernstige kwetsbaarheden in PHP | Rijksoverheid.nl
- 2026-10-21TPO.nl publishes PHP-lek legt DigiD, MijnOverheid en Tweede Kamer plat | TPO.NL
- 2026-10-22 11:30 UTCSaved into the evidence vault: Rijksoverheid / NCSC-NL
- 2026-10-22 11:32 UTCSaved into the evidence vault: TPO.nl
- 2026-10-22Enters this site as confirmed in v0.2.0 (reconstructed from git)
- 2026-10-24Status changes from confirmed to reported in v0.12.1
Published: when the source says it was published. Saved: the first capture into the evidence vault. The rest are this site: the release in which the fact first appeared and every release that changed its wording, sources or status.
What it rests on
Where this fact appears
In the briefings for:
And on every claim.
Every version of this fact
v1 · site v0.2.0 · 22 October 2026 · confirmed
The Dutch NCSC took its own site offline as a precaution, as did DigiD, MijnOverheid and Overheid.nl, with no signs of active exploitation of those services Who says it: the Dutch government Status: confirmed Topic: impact Sources: rijksoverheid-ncsc-php-news, dutchitleaders-websites-offline