Vivicta and Norwegian Digitalisation Agency: Large DDoS attack knocks Norwegian public services offline

Norwegian Government Services Hit by Prolonged DDoS Attack

A large-scale distributed denial-of-service (DDoS) attack has disrupted multiple Norwegian government services for over 30 hours, targeting the infrastructure of IT partner Vivicta. The attack, which began on Monday, overwhelmed servers with traffic, causing outages in critical digital services.

Among the affected systems was ID-porten, a key digital identification platform used by over 4.5 million people to access government services, including healthcare systems. Disruptions impacted online pharmacies, electronic prescriptions, and authentication for public records and inter-agency data exchanges. Some services have gradually resumed, but others remained unstable as of Tuesday morning.

This marks the third DDoS incident affecting Norway’s Digitalisation Agency (Digdir) since June. Officials noted the latest attack was two to three times larger than previous ones, though no sensitive data was compromised. The motive and perpetrators remain unidentified, with no confirmation on whether the incidents are linked.

Healthcare services relying on ID-porten for authentication also faced interruptions, highlighting the broader impact on public infrastructure. Authorities continue working with Vivicta to stabilize the systems.

Source: https://therecord.media/norway-cyberattack-ddos-government

Norwegian Digitalisation Agency (Digdir) cybersecurity rating report: https://www.rankiteo.com/company/digitaliseringsdirektoratet

Vivicta cybersecurity rating report: https://www.rankiteo.com/company/vivictatech

"id": "DIGVIV1787660729",
"linkid": "digitaliseringsdirektoratet, vivictatech",
"type": "Cyber Attack",
"date": "8/2026",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"

{'affected_entities': [{'customers_affected': 'Over 4.5 million people',
                        'industry': 'Public Sector',
                        'location': 'Norway',
                        'name': 'Norwegian Government (Digitalisation Agency - '
                                'Digdir)',
                        'type': 'Government'},
                       {'industry': 'Technology',
                        'location': 'Norway',
                        'name': 'Vivicta',
                        'type': 'IT Service Provider'}],
 'attack_vector': 'Distributed Denial-of-Service (DDoS)',
 'description': 'A large-scale distributed denial-of-service (DDoS) attack has '
                'disrupted multiple Norwegian government services for over 30 '
                'hours, targeting the infrastructure of IT partner Vivicta. '
                'The attack overwhelmed servers with traffic, causing outages '
                'in critical digital services, including ID-porten, a key '
                'digital identification platform used by over 4.5 million '
                'people.',
 'impact': {'data_compromised': 'No sensitive data was compromised',
            'downtime': 'Over 30 hours',
            'operational_impact': 'Disruptions in government digital services, '
                                  'healthcare services, and authentication '
                                  'systems',
            'systems_affected': 'ID-porten, online pharmacies, electronic '
                                'prescriptions, public records, inter-agency '
                                'data exchanges, healthcare authentication '
                                'systems'},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'Cyber Incident Description'}],
 'response': {'recovery_measures': 'Working with Vivicta to stabilize systems'},
 'title': 'Norwegian Government Services Hit by Prolonged DDoS Attack',
 'type': 'DDoS'}