Massive DDoS attack disrupts Norway’s government digital services
Massive DDoS attack disrupts Norway's government digital services.
A significant distributed denial-of-service (DDoS) attack has impacted Norway's shared government digital infrastructure, affecting public sector services since Monday. While some services have been stabilized, others like ID-porten and eSignering remain partially inaccessible. The Norwegian Digitalization Agency (Digdir) reported no data breaches or system compromises, but this marks the third such attack recently, with speculation pointing towards potential Russian involvement.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Vivicta?
Get an email when a new story names Vivicta, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonNorway's shared government digital infrastructure was disrupted by a significant DDoS attack, taking down critical public-facing services like ID-porten and eSignering. The attack highlights the vulnerability of centralized, shared infrastructure where a single attack vector can cascade across multiple government services simultaneously. While no data breach occurred, the repeated nature of these attacks (third incident recently) suggests insufficient mitigation controls have been implemented after prior events. The potential state-sponsored nature of the attack underscores the importance of treating public sector digital services as critical national infrastructure requiring resilient, layered defenses.
What helps against this
How we list vendors- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- Web application firewall and DDoS protection
Websites and APIs stay up, and common web attacks are filtered before they reach them.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.