Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Fact · impact · confirmed
The Dutch NCSC took its own site offline as a precaution, as did DigiD, MijnOverheid and Overheid.nl, with no signs of active exploitation of those services
Primary statement.
Fact-check
A3 Echoed●●●○○○ status overstated · Event · verdict: holds in part · the status word overstates the evidence
The cited primary (Rijksoverheid, 21 Oct 13:59) carries only NCSC.NL taken offline "uit voorzorg" and a general "no active misuse seen yet"; it does not name DigiD, MijnOverheid or Overheid.nl, and the second cited source is a blocked Cloudflare page. DigiD and MijnOverheid are carried by TPO and Insurance Business, Overheid.nl only by Reuters copy (one origin), so A3 for the claim as worded, and "of those services" is the site's own narrowing.
| Capture checked | Result | What it says | sha256 of the text read |
|---|---|---|---|
| rijksoverheid-ncsc-php-news | partial | Vanwege de kwetsbaarheden in PHP is uit voorzorg de website NCSC.NL tijdelijk offline gehaald. | 7e10bcf7cb44e5f7 |
| rijksoverheid-ncsc-php-news | partial | het Nationaal Cyber Security Centrum (NCSC) heeft nog geen actief misbruik gesignaleerd. | 7e10bcf7cb44e5f7 |
| dutchitleaders-websites-offline | blocked | We're verifying you are human. This may take a few seconds. | 28f6003be69e3a97 |
| tpo-nl-digid-offline | carries | DigiD, MijnOverheid, de website van de Tweede Kamer en zelfs die van het Nationaal Cyber Security Centrum (NCSC) gingen uit voorzorg offline. | 2ddfd8817abf25b6 |
| insurancebusiness-uk-councils-met | partial | The Dutch National Cyber Security Centre took its own site offline as a precaution, as did the following: | 89357150e0bc8363 |
| reuters-factbox-websites-offline | carries | They included the Port of Rotterdam, government site Overheid.nl, the national football association KNVB | d562e28995b00a19 |
| rte-reuters-websites-go-dark (in the vault, not yet on this site) | carries | including the Port of Rotterdam, government portal Overheid.nl, the national soccer association KNVB | 99bb92662561bd29 |
| ncsc-nl-site (in the vault, not yet on this site) | absent | Ernstige kwetsbaarheden in PHP: update nu | 4cff0c7ba341429e |
| overheid-nl-site (in the vault, not yet on this site) | absent | nothing that carries it | 93278f942198c318 |
Open tickets: Finding-27, Finding-28, Finding-84.
Graded in Run-1, resting on captures up to 2026-10-22 11:32 UTC. The scale is on the fact-check page.
This fact over time
- 2026-10-21Rijksoverheid / NCSC-NL publishes NCSC: Ernstige kwetsbaarheden in PHP | Rijksoverheid.nl
- 2026-10-21Dutch IT Leaders publishes Just a moment...
- 2026-10-22 11:27 UTCSaved into the evidence vault: Dutch IT Leaders
- 2026-10-22 11:30 UTCSaved into the evidence vault: Rijksoverheid / NCSC-NL
- 2026-10-22Enters this site as confirmed in v0.2.0 (reconstructed from git)
Published: when the source says it was published. Saved: the first capture into the evidence vault. The rest are this site: the release in which the fact first appeared and every release that changed its wording, sources or status.
What it rests on
Where this fact appears
In the briefings for:
And on every claim.
Every version of this fact
v1 · site v0.2.0 · 22 October 2026 · confirmed
The Dutch NCSC took its own site offline as a precaution, as did DigiD, MijnOverheid and Overheid.nl, with no signs of active exploitation of those services Who says it: the Dutch government Status: confirmed Topic: impact Sources: rijksoverheid-ncsc-php-news, dutchitleaders-websites-offline