Allied Intelligence — 2026-08-09

Dutch Military Intelligence Chief MIVD Director Strava Account Exposed Home Address and Movements for Years

BLUFMIVD's own director embodying the fitness-tracker vulnerability he publicly warned about erodes Dutch credibility on operational security at a time of escalating Russian targeting of Western defense figures.

Vice Admiral Peter Reesink, director of the MIVD since February 2024, maintained a public Strava account showing dozens of cycling and running activities from 2018 to 2025, in violation of Defense Ministry policy against recognizable military profiles on such platforms de Volkskrant" data-url="https://www.volkskrant.nl/binnenland/mivd-directeur-had-openbaar-account-bij-strava-activiteiten-jarenlang-te-volgen~bfe15ff4/" data-rt="primary" data-mbfc="high" data-otype="newspaper">12. De Volkskrant reported the data made his home address easy to identify, including trips biking from MIVD headquarters at the Frederik Barracks to his private residence, and also revealed where he stored his camper and the timing and locations of his vacations 13. The account was set to private after de Volkskrant's inquiries, and Reesink has since requested Strava delete it, saying he was unaware the account remained active after deleting the app years earlier without erasing the underlying profile 13. A Defense Ministry spokesperson said Reesink "regrets" the situation and that, per ministry guidance, personnel should lock down profiles and avoid appearing identifiably military on such apps, though the ministry has no authority over personal phones 13.

Analysis
Vice Admiral Reesink's own past warnings about weak Russian-targeting awareness at large organizations make his multi-year exposure of home address, MIVD-to-residence commute patterns, camper storage, and vacation timing a doctrine-practice gap he is meant to police, not commit, undercutting his standing to deliver the internal opsec message as Russian services are separately linked to assassination planning against defense-industry executives in Germany. Reporting rests on de Volkskrant's original investigation alone; NL Times, NOS, and Security.NL republished without independent verification, leaving the story single-source despite four outlets carrying it. This may instead be an isolated administrative lapse, an account left live after app deletion, rather than a systemic MIVD personnel-security failure, since nothing indicates hostile access before de Volkskrant's discovery. The ministry's admitted lack of authority over personal phones means the underlying vulnerability persists structurally beyond this case absent a stronger policy than the existing annual cybersecurity module.

4 sources