Russia and China: Netherlands at highest threat level in 80 years, AIVD warns

“In the 80 years that the AIVD and its predecessors have existed, there has never been a threat landscape like the current one, in which national security is under pressure from so many sides simultaneously and for such a prolonged period,” said AIVD Director-General Simone Smit with the intelligence service’s annual report for 2025, published on Thursday.

Russia is preparing for a prolonged confrontation with the West. The threat from countries with offensive cyber programs, like China and Iran, was greater last year than anticipated. And jihadists, right-wing extremists, and anti-institutional extremists also pose a threat to the Netherlands, the General Intelligence and Security Service (AIVD) said, NOS reports.

Smit called Russia’s attitude towards Europe an “uncomfortable fact.” Russia adopted an even more aggressive and provocative stance towards European countries last year. According to the AIVD, the Russians view European political and military support for Ukraine, something the Netherlands is at the forefront of, as “increasingly hostile.”

The AIVD mentioned the cyberattack Russians carried out on civil servants’ and military personnel’s WhatsApp and Signal accounts last year. It also mentioned the hacker group “Laundry Bear,” a Russia-affiliated espionage group believed to be responsible for the police hack in which the personal data of tens of thousands of cops was stolen.

The intelligence service is also very worried about China. According to Smit, China has been “secretly and illegally active for years to acquire the knowledge of our companies and knowledge institutions.” This threatens the autonomy, innovation, and earning capacity of Dutch companies, the AIVD said. It also fits into China’s ambition to reform the world order, “according to its own autocratic ideology,” the intelligence service said.

According to the AIVD, the threat from China has both broadened and deepened in 2025.

Iran also got a brief mention in the annual report. Iran focuses its cyber threats primarily on critics of the regime, experts dealing with the Middle East, and employees of government agencies. The country is not deterred by the fact that some of its targets are citizens of Western countries, the intelligence service noted.

According to the AIVD, “state actors” like foreign governments, intelligence services, or groups controlled by them are increasingly using criminal networks and individuals for espionage. Some of these criminal networks are structurally active in the Netherlands, the service said.

Beyond threats from other countries, the Netherlands also faces threats from inside. Jihadism remains the greatest threat to national security, the AIVD said, speaking of a “persistent terrorist threat.” This is almost entirely from the terrorist organization Islamic State radicalizing young people online. Last year, the AVID noticed an increase in young jihadists under the age of 24.

Right-wing extremism also poses a threat. The AIVD mentioned two currents within this extremist movement - a broader, non-violent one, and one that does not shy away from violence.

Anti-institutional extremists - “sovereign citizens” who reject authority out of the belief that a malevolent elite wants to oppress, enslave, or murder people - are also still active in the Netherlands. They particularly target journalists and judges. The police arrested eight sovereign citizens last year. While raiding their properties, the police found firearms, large quantities of ammunition, and heavy fireworks.

Left-wing extremists also got a mention. The AIVD said that Israel’s persistent attacks on Gaza were a major topic for this group last year. The AIVD considers the threat from this group as minimal.