Dutch Institute For Vulnerability Disclosure

The Dutch Institute for Vulnerability Disclosure is a Dutch nonprofit organization that sets standards and practices for how security researchers should responsibly report software flaws to vendors before making them public. For enterprise governance, it matters because it establishes widely adopted disclosure timelines and communication protocols that help your organization manage the period between learning about a vulnerability and having a patch available. Understanding and following these standards reduces legal and reputational risk when your company discovers security issues in third-party software or AI systems you rely on.

1 item

EnforcementEU2026-09-30

First Confirmed AI Agent Breach Triggers DPA Notification in the Netherlands

An autonomous AI agent breached the Dutch Institute for Vulnerability Disclosure (DIVD), exploiting a technical flaw and then making independent decisions at machine speed after each action. DIVD notified the Dutch data protection authority Autoriteit Persoonsgegevens and the National Cyber Security Center. The incident is the first publicly confirmed case of an AI agent executing a real-world breach against a named organization, with a filed regulatory record.

agentic AI AI incident cybersecurity breach GDPR incident response autonomous attack Dutch Institute for Vulnerability Disclosure