In September 2024, The Netherlands police faced a data breach in which the Russian state-supported threat actor Laundy Bear gained access to the corporate address book. This presentation gives insight into how the attack occurred, how the High Tech Crime Team and the Public Prosecution Service responded and lessons learned.