Massive DDoS attack disrupts Norway’s government digital services

A large distributed denial-of-service attack has disrupted Norway’s shared government digital infrastructure since early Monday, affecting public-sector services used by citizens and agencies. The assault began at 3:38 a.m. Central European Summer Time and has targeted systems operated by the Norwegian Digitalization Agency, known as Digdir, and its operations provider Vivicta. Several services became completely unavailable for short periods, according to an announcement from the agency.

Digdir runs the country’s common digital government backbone, including public-service logins, electronic IDs and signatures, secure digital mail, government forms, public-record access, and inter-agency data exchange. The organization said many affected systems have now been stabilized, but some services remain partially inaccessible, including ID-porten and eSignering. Users may see failed connections, slow server responses, or unusually long login times while the incident continues.

The agency has directed people to its operating status page and an incident report page for live updates on service availability. Digdir director Frode Danielsen stated that the investigation has found no indication of a security breach affecting the agency’s systems or any compromise of personal data. Danielsen also noted this is the third DDoS attack on Digdir in recent months, following one in June and another on August 3.

Norway’s National Security Authority and the Data Protection Authority have been notified of the incident. There is no official attribution for the attack so far, though Norwegian media have speculated about possible Russian involvement. The source article does not provide any evidence for that speculation, and no actor has claimed responsibility.

Other platforms that rely on Digdir but are not directly targeted are also experiencing knock-on problems. Altinn, Norway’s central digital platform for communication between citizens, businesses, and government agencies, has posted a warning about login issues and operational problems, linking to Digdir’s status page. Skatteetaten, the Norwegian tax administration, shows a similar notice about login difficulties and asks users to try again later.

The attack does not appear to have direct implications for U.S. government systems, but it highlights the vulnerability of shared national digital utilities to repeated DDoS campaigns. The source article also includes a separate, unrelated item about the Blue Report 2026 measuring defensive techniques across 338 million simulations, as well as a U.S. warning about AI-powered attacks on Siemens programmable logic controllers in critical infrastructure. Those details are not part of the Norwegian incident and are reported here only for completeness of the original text.

More cybersecurity news from TechManNews.