DDoS Attack Disrupts Norway’s Shared Government Digital Services
Summary
A DDoS attack disrupted Norway’s shared government digital infrastructure, leaving some services, including ID-porten and eSignering, partly unavailable. Digdir reports no indication of a security breach or personal-data compromise; the attacker is unidentified.
Key points
- The DDoS attack began Monday at 03:38 CEST and targeted infrastructure operated by Digdir and provider Vivicta.
- Several services were briefly unavailable; Digdir says many affected systems have stabilized, but ID-porten and eSignering remain partially inaccessible.
- Users may experience failed connections, slow responses, and long login times.
- Altinn and Skatteetaten reported login or operational problems linked to the disruption.
- Digdir director Frode Danielsen said the investigation found no indication of a security breach or personal-data compromise.
- Norway’s National Security Authority and Data Protection Authority were notified. The attack has no official attribution; Norwegian media speculated about possible Russian involvement.
- Danielsen said this was the third recent DDoS attack targeting Digdir, following attacks in June and August 3.
Article Details
- Victim Organization
- Norwegian Digitalization Agency (Digdir)
- Incident Type
- Distributed denial-of-service (DDoS) attack
- Operational Impact
- Several services were completely unavailable for short periods. Many affected systems were stabilized, but ID-porten and eSignering remained partially inaccessible. Users experienced failed connections, slow responses, and long login times; Altinn and Skatteetaten also reported login problems.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed
MITRE ATT&CK
People
Vendors
Products
Altinn#DigdireSigneringDigdir says there is no sign of a security breach or personal data compromise, but some services like ID-porten and eSignering remain partially unavailable.ID-portenDigdir says there is no sign of a security breach or personal data compromise, but some services like ID-porten and eSignering remain partially unavailable.