Massive DDoS Disrupts Norway's Shared Government Digital Infrastructure for a Second Day
A large-scale Distributed Denial-of-Service (DDoS) attack disrupted the digital backbone of the Norwegian Digitalisation Agency (Digdir), impacting critical public authentication, electronic signature, and inter-agency services.
Overview
| Attribute | Detail |
|---|---|
| Target Organisation | Norwegian Digitalisation Agency (Digdir) |
| Affected Services | ID-porten (citizen login), eSignering (e-signatures), Altinn, Skatteetaten (Tax Administration) |
| Attack Type | Distributed Denial of Service (DDoS) |
| Commencement | Monday, 25 August 2026 at 03:38 CEST |
| Data Breach Status | No indication of data breach or unauthorised data access |
| Frequency | Third major DDoS wave hitting Digdir in 2026 (following June and 3 August incidents) |
Impact & Response
The coordinated traffic flood resulted in widespread temporary outages across key Norwegian citizen portals. Dependent platforms including Altinn (public reporting and digital dialogue) and Skatteetaten issued service advisories alerting users to login failures.
Digdir director Frode Danielsen confirmed that security controls prevented any underlying network penetration or personal data exposure. Norway's National Security Authority (NSM) and Data Protection Authority (Datatilsynet) were formally notified. While formal state attribution remains pending, Norwegian domestic intelligence and media outlets are examining potential Russian-nexus hacktivist involvement.
Significance
The incident illustrates the severe operational fragility created by shared digital identity infrastructure. While no data was exfiltrated, bringing down centralised identity brokers effectively isolates citizens from essential e-government services across entire nations.
Australian Context
The disruption serves as a key case study for Australian federal and state digital identity programs (such as myGov and myID), demonstrating the need for resilient, multi-region DDoS mitigation and distributed gateway architectures.