Ransomware Attack Targets Norwegian Union NTL; Member Data May Be Exposed

Summary
Norwegian union NTL reports a June 16 ransomware attack targeting its core IT systems. Social security and bank account details may have been exposed; the union is working to restore affected systems.
Key points
- Norsk Tjenestemannslag (NTL) was reportedly hit by ransomware on June 16, 2026.
- The attack targeted the union’s central IT systems.
- Sensitive personal information may have been accessed, including social security and bank account numbers.
- NTL represents more than 59,000 members.
- The union is working to restore affected systems.
Article Details
- Victim Organization
- Norsk Tjenestemannslag (NTL)
- Victim Domain
- ntl.no
- Incident Type
- Ransomware attack targeting central IT systems
- Incident Date
- 2026-06-16
- Disclosure Date
- 2026-06-16
- Data Types Exposed
- Social security numbers (potentially exposed)
- Bank account numbers (potentially exposed)
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- NTL is working to restore affected systems.
- Ransom Or Extortion
- No ransom demand or extortion activity reported.
- Claim Status
- confirmed
