Belgian State Security and Organizations Targeted by Cyberattacks

### Executive Summary Between May 2025 and Spring 2026 Belgian State Security experienced a breach exposing employee names, phone numbers and GPS locations via vulnerabilities in Ivanti EPMM, while a separate February 2026 Russian cyberattack leveraged backdoors in Fortinet antivirus software to compromise at least 270 organizations and over 110 million accounts; both incidents are ongoing and highlight critical weaknesses in widely used security tools.