Norway’s Government Digital Infrastructure Hit by Major DDoS Attack A large-scale distributed denial-of-service (DDoS) attack has disrupted Norway’s shared government digital infrastructure since early Monday, impacting critical public-sector services. The attack began at 03:38 CEST, targeting systems managed by the Norwegian Digitalization Agency (Digitaliseringsdirektoratet, or Digdir) and its operations provider, Vivicta. Digdir oversees key digital services, including public login portals (ID-porten), electronic IDs, secure digital mail, government forms, and inter-agency data exchange. While some systems have been stabilized, others such as ID-porten and eSignering remain partially inaccessible, causing connection failures, slow responses, and extended login delays. Officials confirmed no evidence of a security breach or data compromise. However, this marks the third DDoS attack on Digdir in recent months, following incidents in June and on August 3. The Norwegian National Security Authority (NSM) and Data Protection Authority (Datatilsynet) have been notified, though no official attribution has been made. Norwegian media has speculated about potential Russian involvement. The outage has had a cascading effect, disrupting services that rely on Digdir’s infrastructure. Altinn, Norway’s central digital platform for citizen-government interactions, reported login issues, while the tax agency (Skatteetaten) advised users to delay access attempts. Updates on service availability are being posted on Digdir’s status and incident report pages.

Norwegian Government Services Hit by Prolonged DDoS Attack A large-scale distributed denial-of-service (DDoS) attack has disrupted multiple Norwegian government services for over 30 hours, targeting the infrastructure of IT partner Vivicta. The attack, which began on Monday, overwhelmed servers with traffic, causing outages in critical digital services. Among the affected systems was ID-porten, a key digital identification platform used by over 4.5 million people to access government services, including healthcare systems. Disruptions impacted online pharmacies, electronic prescriptions, and authentication for public records and inter-agency data exchanges. Some services have gradually resumed, but others remained unstable as of Tuesday morning. This marks the third DDoS incident affecting Norway’s Digitalisation Agency (Digdir) since June. Officials noted the latest attack was two to three times larger than previous ones, though no sensitive data was compromised. The motive and perpetrators remain unidentified, with no confirmation on whether the incidents are linked. Healthcare services relying on ID-porten for authentication also faced interruptions, highlighting the broader impact on public infrastructure. Authorities continue working with Vivicta to stabilize the systems.