It started on 8 August 2026
Another data breach. More personal data out in the open. Another organisation apologising and promising to take measures.
I noticed that reactions to data breaches were starting to change. Where a breach once caused outrage, you increasingly heard a resigned response:
“My data is already out there anyway. Why should I still bother?”
In a LinkedIn post on 8 August 2026 I gave that feeling a name: datalekmoe (breach fatigue).
That same day I registered the domain name Datalekmoe.nl.
Later that day the Dutch newspaper De Stentor also published an article in which the word was central. The subject is clearly not only on my mind.
From a word to a societal issue
To me, breach fatigue is about more than a feeling of tiredness. It touches on a fundamental problem in digital resilience.
When people are constantly warned but hardly experience that their efforts make a difference, there is a risk of indifference.
Why still set a strong password? Why stay alert to phishing? Why report a suspicious situation?
That is a dangerous development. Because digital resilience depends not only on technology, but also on human behaviour, trust and the willingness to act.
From breach fatigue to breach fit
That is why I did not want to stop at pointing out the problem.
What if we approached digital resilience the way we approach physical fitness?
You do not get fit by watching one presentation about healthy living. Fitness requires practice, repetition, coaching and maintenance.
Why would digital resilience be any different?
That idea gave rise to Datalekfit.
A training concept in which employees, teams and organisations work step by step on their digital condition.
Not only through awareness campaigns, but through a combination of basic technical measures, practical skills, healthy security reflexes, a safe reporting culture and practising under pressure.
From awareness to actual action
My ambition with Datalekfit is to make digital resilience concrete, accessible and trainable.
Because in the end, it is not about how much people know about cybersecurity.
It is about what they do when it really counts.
Less breach fatigue. More breach fit.