Aruba — Cyber Threat Profile
Aruba, autonomous within the Kingdom of the Netherlands, anchors cyber governance in its state security service, Veiligheidsdienst Aruba (VDA), which leads early warning and strategic advice; officials favor regional response structures over a dedicated 24/7 CERT, and TNO drafted a cyber-resilience roadmap. Data protection rests on the pre-GDPR Landsverordening persoonsregistratie (2011), with no breach-notification duty, though an ICAO-aligned aviation cybersecurity strategy has been in development since February 2025. In July 2025 a Parliament email account was hijacked to send phishing amid a wave of attacks on Dutch Caribbean governments, and in September 2025 the Qilin ransomware group claimed Aruba's sole electricity supplier, NV Elmar, publicly threatening an island-wide blackout. With tourism near 70% of GDP, hospitality, aviation, and utilities are the key exposures.- Secure Internet servers per 1M people (2024): 1,574.1 (source: World Bank)
Threat actors targeting Aruba
- Qilin Ransomware · 1 incident(s)
Recent claimed incidents
Read the full analysis on IntelFusions