Cyberattack on ID-porten disrupted Norwegian public services for three days
A large DDoS attack targeted Norway’s ID-porten login service from 24 to 26 August. Digitalisation agency Digdir’s review says other national digital services consequently became wholly or partly unavailable at intervals.
The attack began at 03:38 on 24 August and ended at 19:30 on 26 August. A DDoS attack floods a service with artificial network traffic. Digdir describes this as the third attack on ID-porten in nine weeks, two to three times stronger than the earlier attacks. Most services remained available for much of the incident, but users encountered interruptions and slower logins.
The impact spread because several services share supplier Vivicta’s platform. Altinn, electronic signing and digital mailboxes were also affected by ID-porten login problems. Digdir reported normal service at 14:50 on 27 August; restrictions on logins from abroad could persist until 2 September. Digdir and Vivicta introduced protective measures and informed national security authority NSM and privacy regulator Datatilsynet. The review reports no indication that personal data was compromised.
