Large DDoS attack disrupts Norwegian government digital services
A major distributed denial-of-service attack has been hitting Norway's shared government infrastructure since Monday, causing outages in login and e-signature services. The Norwegian Digitalization Agency says no data breach has occurred, but services remain partially inaccessible. This is the third such attack on the agency recently.
The attack began at 03:38 CEST Monday, targeting infrastructure run by Digdir and its provider Vivicta. Services like ID-porten and eSignering remain partially down, causing slow logins and connection errors. Digdir’s director confirmed this is the third such incident in recent months, following attacks in June and early August. Norwegian authorities have been notified, but no official attribution has been made, though local media have speculated about Russian involvement. Other agencies, including Altinn and the tax administration, have posted warnings about login disruptions.
This disruption could affect millions of Norwegian citizens and businesses who rely on government portals for taxes, digital signatures, and official communication. While no data breach is indicated, repeated outages may erode public trust in digital government services and highlight the vulnerability of centralized infrastructure. If attacks persist, they could force agencies to invest heavily in resilience, potentially delaying other digital initiatives.