A sustained distributed denial-of-service (DDoS) attack began targeting Norway’s shared government digital infrastructure at 03:38 CEST on Monday, disrupting services used by millions of citizens and businesses. The attack hit Digitaliseringsdirektoratet (Digdir) — Norway’s Digitalization Agency — and its operations provider Vivicta. Digdir runs the backbone of Norway’s e-government: ID-porten (the national login portal), eSignering (electronic signatures), secure digital mail, government forms, public-record access, and inter-agency data exchange. Several services were completely unavailable for short periods; ID-porten and eSignering remained partially inaccessible as of Monday evening. Users encountered failed connections, slow server responses, and extended login wait times.
This is the third DDoS attack targeting Digdir in recent months, following incidents in June and on August 3. Digdir director Frode Danielsen said there is no indication that the attack resulted in a data breach or system compromise — the disruption was availability-only. The Norwegian National Security Authority (NSM) and the Data Protection Authority (Datatilsynet) have been notified. Norwegian media have speculated about possible Russian involvement, though no official attribution has been made. Downstream platforms including Altinn (the national citizen-business communication platform) and Skatteetaten (the tax authority) also displayed warnings about login problems as a result of the disruption.