Norway's Digital Government Infrastructure Hit by New DDoS Attack
Third cyberattack in months disrupts critical public services in Norway.
1Third Wave of Attacks
Norway's shared government infrastructure suffered its third DDoS attack this summer. The August 24th incident targeted systems operated by the Digitalisation Agency Digdir and service provider Vivicta. Previous attacks occurred in June and August 3rd. The repeated strikes indicate this infrastructure has become a persistent target for threat actors.
2Affected Services
The attacks hit authentication systems like ID-porten, MinID and Maskinporten, widely used by government agencies and citizens. Critical platforms including Altinn experienced login issues. Targeting shared infrastructure creates a domino effect, disrupting multiple dependent services simultaneously.
3Operational Impact
Digdir reported complete outages for some services and performance degradation for others. Full recovery took one day. Previous attacks similarly affected health (Helsenorge), unemployment (NAV) and tax (Skatteetaten) systems. Such disruptions directly impact citizens relying on these essential public services.
4Security Concerns
Digdir confirmed the attacks only caused service disruptions with no evidence of data breaches or system compromises. Norway's National Security Authority and Data Protection Authority were notified. DDoS attacks typically aim to disrupt services rather than steal data, representing a distinct security challenge.
5Infrastructure Vulnerabilities
Shared authentication and data exchange layers represent critical weak points in modern digital government systems. By targeting these common components, attackers can cause widespread outages without needing to penetrate individual systems. The Norway case highlights these dependency risks in government digitalization.
6Defense Dynamics
While Digdir and Vivicta demonstrate capability to mitigate attacks, repeated strikes force continuous updates to traffic filtering rules. Frequent changes can create access challenges even for legitimate users. Technical teams work to stabilize systems between attack waves.
7Unclear Attribution
Attack sources remain officially unconfirmed. Norwegian media speculated about Russian-linked groups, but these claims lack evidence. DDoS campaigns can be politically, financially or capability-motivated. Without technical evidence, attributing responsibility remains speculative.
8Critical Infrastructure Warning
These incidents demonstrate how fragile digital government infrastructure can be. Coordinated attacks against shared systems could paralyze entire public services. Norway's triple attack underscores the importance of proactive cybersecurity measures and redundant systems for critical infrastructure.
Original article: Security Affairs — Norveç'in Dijital Devlet Altyapısına Yeni DDoS Saldırısı