An intruder breached Dutch certificate authority DigiNotar in 2011 and issued 531 fraudulent certificates for 344 domains, including *.google.com, which was then used in a man-in-the-middle attack on roughly 300,000 users — more than 99% of them in Iran — according to Fox-IT's "Operation Black Tulip" investigation.
On 19 February 2015 The Intercept, citing Snowden documents, reported that a joint NSA–GCHQ team had penetrated Gemalto, the world's largest SIM maker, to steal the Ki keys used to secure mobile communications; Gemalto said a 2010–2011 operation "probably happened" but denied massive key theft.
In July 2023 Dutch firm Midnight Blue published TETRA:BURST, five vulnerabilities in the secret cryptography of TETRA radio used by police, militaries and critical infrastructure, including a TEA1 property that reduces its 80-bit key to 32 bits of effective entropy.