Skip to main navigationSkip to main content
Central government logo, link to homepage
National Cyber Security CentreMinistry of Justice and Security

Report an incident to NCSC-NL

With this form you can voluntary report a serious digital security NIS2 incident or an obliged Wbni incident report to the Dutch National Cyber Security Center (NCSC-NL).

While the Cyberbeveiligingswet (the Dutch implementation of the European NIS2-directive) has not yet been implemented, the Wbni still is in effect. Organisations in the vital sectors, digital service providers and organizations in the central government are obliged to report serious digital security incidents to the NCSC.

When the Cyberbeveiligingswet (NIS2) applies to your organisation later this year, you will have to report significant incidents. For now all organisations can submit a voluntary report for a cyberincident using the form below or their MyNCSC-account.

Need assistance?

24-hour assistance is available for (urgent) contact and direct support.

Form

Report an incident

1. About the incident report

Is this notification voluntary? Does it concern a significant incident? (required)
A significant incident exists if the incident:causes or may cause a serious operational disruption of services or financial losses for the entity concerned;has affected or may affect other natural or legal persons by causing substantial material or immaterial damage. 
What is the status of the incident? (required)
The status of the incident gives an indication of the phase the incident is in.
Does the incident have a cross-border impact that also affects other EU countries? (required)
For significant incidents with a cross-border impact, the national CSIRT informs other EU member states.

2. Incident details

Give a description of the incident that is as detailed as possible based on the information currently available. Provide as much context as possible. Indicators of compromise may also be included in this field.
0 characters
Describe the visible and expected impact of the incident. This could include: whether critical processes have been affected and if so, which ones; the incident’s impact on the organisation and the potential or expected impact on customers; whether there is a visible or expected impact that has national security implications or entails a risk of loss of human life or disruption of public order.
0 characters
Where possible, provide information about the cause of the incident, such as human error, a software vulnerability, etc. In addition, state what measures have been taken to prevent a repeat incident. It is possible to attach reports at the end of this form.
0 characters
Have customers been informed / will they be informed?
If available, give the expected recovery time in days and hours.
Indicate what the organisation itself is doing or has done, including engaging a third party to provide support.
0 characters
Is there a request for assistance? (required)
This is where to upload any reports, such as investigation results, information about the cause of the incident, or an overview of the measures taken to prevent a repeat incident.
Maximum 5 files allowed, with a limit of 10 MB. Allowed types: doc, docx, xls, xlsx, ppt, pptx, pps, ppsx, txt, pdf.
Has the incident been reported to the police?
It is advised to always report an incident to the police if it was caused intentionally.
0 characters

3. Company name

Enter the name of the street and house number where the organisation’s headquarters is located.
Does the organisation also fall under another sector? (required)

4. Who notifies this incident?

Is the notifier also the contact person regarding the incident? (required)

5. Data processing

We use this data to process the incident report. The information is entered into the reporting register managed by the NCSC, which aims to limit societal disruption caused by cyberattacks. Significant (non-voluntary) reports are shared with the relevant CSIRT and the relevant supervisory authority. Check which supervisory authority and CSIRT apply to your organisation. (opens a new tab)