Massive DDoS attack disrupts Norway’s government digital services

By Bill Toulas

• August 25, 2026
• 11:52 AM
• 0

A large distributed denial-of-service (DDoS) attack has disrupted Norway’s shared government digital infrastructure since Monday, affecting services used by the public sector.

The attack started at 03.38 CEST on Monday and has targeted  the infrastructure supporting services operated by the Norwegian Digitalization Agency, Digitaliseringsdirektoratet (Digdir), and its operations provider, Vivicta.

Digdir operates Norway’s shared digital government infrastructure, including public-service logins, electronic IDs and signatures, secure digital mail, government forms, public-record access, and data exchange between agencies.

In an announcement published earlier today, the organization states that several services were completely unavailable for short periods.

The agency says many affected systems have now been stabilized, although some services, like ID-porten and eSignering, remain partially inaccessible.

As a result of the attack, users may encounter errors such as failed connections, slow server responses, and unusually long login times.

For live updates on the availability of Digdir services, people may consult the services' operating status page as well as the incident report page with updates from Norway's Directorate for Digitization.

Digdir director Frode Danielsen says the investigation into the incident showed no indication of a security breach affecting the organization’s systems or any compromise of personal data.

Danielsen added that this is the third DDoS attack targeting Digdir recently, following one in June and another on August 3.

The Norwegian National Security Authority (NSM) and the Norwegian Data Protection Authority (Datatilsynet) have been notified accordingly.

There is currently no official attribution for the attack, although Norwegian media have speculated about potential Russian involvement.

Meanwhile, services that rely on Digdir but are not directly targeted also experience disruptions.

Altinn, Norway’s central digital platform for communication between citizens, businesses, and government agencies, published a warning about login issues and operational problems, linking to Digdir’s status page.

Skatteetaten, Norway’s tax administration agency, displays a similar notice about login issues on its website and urges users to try again later.

.article-callout { background-color: #f0f6ff; width: 95%; max-width: 800px; margin: 15px auto; border-radius: 8px; border: 1px solid #d6ddee; display: flex; align-items: stretch; overflow: hidden; } .article-media { flex: 1; max-width: 220px; display: flex; } .article-media a { display: flex; width: 100%; height: 100%; } .article-media img { width: 100%; height: 100%; border-radius: 8px 0 0 8px; display: block; } .article-callout .article-media img { margin-top: 0 !important; height: 100% !important; } .article-body { flex: 2; padding: 10px; display: flex; flex-direction: column; justify-content: center; } .article-body h2 { font-size: 17px !important; font-weight: 700; color: #333; line-height: 1.4; font-family: Georgia, "Times New Roman", Times, serif; margin: 0 0 14px 0; } .article-body p { font-weight: bold; font-size: 14px; margin: 0 0 clamp(6px, 2vw, 14px) 0; } .article-link { background-color: #fff; border: 1px solid #3b59aa; color: black; text-align: center; text-decoration: none; border-radius: 8px; display: inline-block; font-size: 16px; font-weight: bold; padding: 10px 20px; width: fit-content; } @media (max-width: 600px) { .article-callout { flex-direction: column; align-items: center; } .article-media { max-width: 100%; } .article-media img { border-radius: 8px 8px 0 0; } .article-body { padding: 15px; width: 100%; } .article-link { width: 100%; margin: 0 auto; box-sizing: border-box; } }

Once attackers have valid credentials, only 37% of their actions are blocked

Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.

The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.

Get the report

Related Articles:

DDoS attacks over 1 Tbps surged fivefold in the second quarter

Large-scale DDoS attacks disrupted Threema secure messaging service

North Carolina Ports confirms cyberattack disrupting operations

US warns of AI-powered attacks on Siemens PLCs in critical infrastructure

Edu tech firm Instructure discloses cyber incident, probes impact