Home ยท Wiki ยท Incidents & Campaigns
type: incident ยท created: 2026-08-26 ยท updated: 2026-08-26 ยท tags: [incident, technique, sector-government] ยท confidence: high ยท severity: medium ยท affected_sectors: [government] ยท au_impact: false

Massive DDoS Disrupts Norway's Shared Government Digital Infrastructure for a Second Day

A large-scale Distributed Denial-of-Service (DDoS) attack disrupted the digital backbone of the Norwegian Digitalisation Agency (Digdir), impacting critical public authentication, electronic signature, and inter-agency services.

Overview

Attribute Detail
Target Organisation Norwegian Digitalisation Agency (Digdir)
Affected Services ID-porten (citizen login), eSignering (e-signatures), Altinn, Skatteetaten (Tax Administration)
Attack Type Distributed Denial of Service (DDoS)
Commencement Monday, 25 August 2026 at 03:38 CEST
Data Breach Status No indication of data breach or unauthorised data access
Frequency Third major DDoS wave hitting Digdir in 2026 (following June and 3 August incidents)

Impact & Response

The coordinated traffic flood resulted in widespread temporary outages across key Norwegian citizen portals. Dependent platforms including Altinn (public reporting and digital dialogue) and Skatteetaten issued service advisories alerting users to login failures.

Digdir director Frode Danielsen confirmed that security controls prevented any underlying network penetration or personal data exposure. Norway's National Security Authority (NSM) and Data Protection Authority (Datatilsynet) were formally notified. While formal state attribution remains pending, Norwegian domestic intelligence and media outlets are examining potential Russian-nexus hacktivist involvement.

Significance

The incident illustrates the severe operational fragility created by shared digital identity infrastructure. While no data was exfiltrated, bringing down centralised identity brokers effectively isolates citizens from essential e-government services across entire nations.

Australian Context

The disruption serves as a key case study for Australian federal and state digital identity programs (such as myGov and myID), demonstrating the need for resilient, multi-region DDoS mitigation and distributed gateway architectures.

Sources