Amsterdam police on Tuesday seized a server belonging to Italian internet service provider Autistici/Inventati (A/I) from a datacenter at Science Park, acting on a U.S. mutual legal assistance request. A digital copy of the encrypted server's contents is now being sent directly to the United States. The server belonged to a left-wing, anticapitalist collective that for twenty-five years provided free web hosting and email services to roughly twenty thousand organizations worldwide. The seizure is the latest consequence of the Trump administration's designation of A/I as a terrorist-linked entity for allegedly facilitating 'antifa' — a label the U.S. government applies to antifascist activists. That designation, issued in late August, was itself unprecedented: internet service providers are not typically held responsible for the content their users publish. The move broke a foundational norm of internet governance that has held since the platform liability debates of the 1990s. The practical consequences cascaded quickly. A/I lost access to its bank account and domain name. Within a week of the sanctions announcement, the volunteer-run organization voted to dissolve entirely — not because it agreed with the designation, but to protect the people and organizations connected to it. Donors, users, anyone with a financial or digital trail leading to A/I became potentially exposed. The Amsterdam seizure confirms that fear was well-founded. An Amsterdam police spokesperson described the process as routine: a mutual legal assistance request arrives, and "you just carry out it." Digital forensics teams are now creating a complete image of the server for transfer to U.S. authorities. The server will be returned to its owners afterward — but the data will already be in American hands. A former A/I volunteer, speaking anonymously for security reasons, said the server was one of the last pieces of hardware the collective had not yet decommissioned. Servers at other European locations had already been shut down and their disks wiped in the weeks following the sanctions. The Dutch server remained because discussions with the datacenter DC1 — a distant successor to the pioneering Dutch ISP Xs4all — were still ongoing. The volunteer expressed surprise rather than alarm, noting the server was encrypted and should not contain data that would endanger former users. What makes this structurally significant is the mechanism, not the target. A domestic U.S. political designation — labeling antifascism as terrorism — has been converted into an international law enforcement instrument via mutual legal assistance treaties. The Amsterdam police treated it as bureaucratic routine. No Dutch court appears to have independently assessed whether the underlying designation met European legal standards for terrorism or whether the data request was proportionate. The twenty-year question is whether this becomes a template. If a U.S. administration can designate a foreign ISP as terrorist for hosting political speech, trigger sanctions that destroy the organization financially, and then use mutual legal assistance to harvest the data of its twenty thousand users from European servers — all without meaningful European judicial review — the infrastructure of European digital sovereignty is weaker than anyone publicly admits. The A/I case is small. The precedent is not.
