Norway’s Government Digital Infrastructure Hit by Major DDoS Attack
A large-scale distributed denial-of-service (DDoS) attack has disrupted Norway’s shared government digital infrastructure since early Monday, impacting critical public-sector services. The attack began at 03:38 CEST, targeting systems managed by the Norwegian Digitalization Agency (Digitaliseringsdirektoratet, or Digdir) and its operations provider, Vivicta.
Digdir oversees key digital services, including public login portals (ID-porten), electronic IDs, secure digital mail, government forms, and inter-agency data exchange. While some systems have been stabilized, others such as ID-porten and eSignering remain partially inaccessible, causing connection failures, slow responses, and extended login delays.
Officials confirmed no evidence of a security breach or data compromise. However, this marks the third DDoS attack on Digdir in recent months, following incidents in June and on August 3. The Norwegian National Security Authority (NSM) and Data Protection Authority (Datatilsynet) have been notified, though no official attribution has been made. Norwegian media has speculated about potential Russian involvement.
The outage has had a cascading effect, disrupting services that rely on Digdir’s infrastructure. Altinn, Norway’s central digital platform for citizen-government interactions, reported login issues, while the tax agency (Skatteetaten) advised users to delay access attempts. Updates on service availability are being posted on Digdir’s status and incident report pages.
Vivicta TPRM report: https://www.rankiteo.com/company/vivicta
Altinn TPRM report: https://www.rankiteo.com/company/altinn
"id": "vivalt1787675109",
"linkid": "vivicta, altinn",
"type": "Cyber Attack",
"date": "8/2026",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"{'affected_entities': [{'customers_affected': 'Citizens and government '
'agencies relying on Digdir '
'services',
'industry': 'Government',
'location': 'Norway',
'name': 'Norwegian Digitalization Agency (Digdir)',
'type': 'Government Agency'},
{'industry': 'Technology/IT Services',
'location': 'Norway',
'name': 'Vivicta',
'type': 'Operations Provider'},
{'customers_affected': 'Citizens and businesses',
'industry': 'Government',
'location': 'Norway',
'name': 'Altinn',
'type': 'Digital Platform'},
{'customers_affected': 'Taxpayers',
'industry': 'Government',
'location': 'Norway',
'name': 'Skatteetaten (Norwegian Tax Agency)',
'type': 'Government Agency'}],
'attack_vector': 'Distributed Denial-of-Service (DDoS)',
'customer_advisories': 'Tax agency advised users to delay access attempts',
'date_detected': '2023-10-09T03:38:00+02:00',
'description': 'A large-scale distributed denial-of-service (DDoS) attack has '
'disrupted Norway’s shared government digital infrastructure '
'since early Monday, impacting critical public-sector '
'services. The attack began at 03:38 CEST, targeting systems '
'managed by the Norwegian Digitalization Agency '
'(Digitaliseringsdirektoratet, or Digdir) and its operations '
'provider, Vivicta. Digdir oversees key digital services, '
'including public login portals (ID-porten), electronic IDs, '
'secure digital mail, government forms, and inter-agency data '
'exchange. While some systems have been stabilized, others '
'such as ID-porten and eSignering remain partially '
'inaccessible, causing connection failures, slow responses, '
'and extended login delays.',
'impact': {'data_compromised': 'No evidence of data compromise',
'operational_impact': 'Connection failures, slow responses, '
'extended login delays, cascading '
'disruptions to dependent services',
'systems_affected': 'ID-porten, eSignering, Altinn, government '
'forms, secure digital mail, inter-agency data '
'exchange'},
'investigation_status': 'Ongoing, no official attribution',
'references': [{'source': 'Norwegian Digitalization Agency (Digdir) status '
'page'},
{'source': 'Norwegian media'}],
'regulatory_compliance': {'regulatory_notifications': 'Norwegian National '
'Security Authority '
'(NSM) and Data '
'Protection Authority '
'(Datatilsynet) '
'notified'},
'response': {'communication_strategy': 'Advisories posted on Digdir’s status '
'page, tax agency advised users to '
'delay access attempts',
'law_enforcement_notified': 'Norwegian National Security '
'Authority (NSM) and Data Protection '
'Authority (Datatilsynet) notified',
'recovery_measures': 'Some systems stabilized, updates posted on '
'Digdir’s status and incident report pages'},
'stakeholder_advisories': 'Updates posted on Digdir’s status and incident '
'report pages',
'title': 'Norway’s Government Digital Infrastructure Hit by Major DDoS Attack',
'type': 'DDoS'}