The International Criminal Court (ICC), located in The Hague, Netherlands has taken significant steps to enhance its online security measures. This decision comes in the wake of a recent cybersecurity breach that occurred five weeks ago, with the organization confirming that the incident was indeed an act of espionage.

In an official statement, the ICC declared that upon confirmation of the incident through its alert system, it promptly took action to minimize its impact. This involved initiating an immediate incident response in collaboration with the Netherlands, as the "host state," and enlisting the assistance of external cyber security specialists. The response efforts encompassed a thorough forensic analysis of the incident, its underlying causes, and the extent of its consequences, along with the implementation of initial mitigating measures.

“The evidence available thus far indicates a targeted and sophisticated attack with the objective of espionage,” the ICC said.

“The attack can therefore be interpreted as a serious attempt to undermine the court’s mandate. Based on the forensic analysis carried out, the court has already taken and will continue to take all necessary steps to address any compromise to data belonging to individuals, organizations, and States. Should evidence be found that specific data entrusted to the court has been compromised, those affected would be contacted immediately and directly by the court,” it said.

The ICC reported that, based on the presently available information confirming the party responsible for the attack remains elusive. Nevertheless, Dutch law enforcement authorities have initiated a criminal investigation in this regard.

Consequent to the cyber-attack, the court is actively strengthening its risk management framework and devising a series of measures and protocols. These preparations aim to ensure the court's readiness to counter any potential fallout resulting from the cyber-attack, including potential security risks that may impact victims and witnesses, court personnel, and the overall functioning of the ICC.

"As part of a broader assessment into potential actions by threat actors, the court has also identified that disinformation campaigns targeting the ICC and its officials may be anticipated to be launched in an effort to tarnish the ICC image and delegitimize its activities. The court is also accelerating a number of existing initiatives aimed at enhancing digital security," it said.

The ICC announced its commitment to collaborative efforts in addressing the growing threat of cyber-attacks. This endeavour aims to safeguard the institution's ability to fulfill its crucial mission of dispensing justice and ensuring accountability, a responsibility shared by all States Parties.

Image source: ANI