Norad has been targeted by a cyberattack in which the perpetrators may have gained access to the names and email addresses of 20,614 registered users of Norad’s Grant Portal. In addition, they extracted information related to grant applications submitted by at least three organizations.
Norad is still working to determine the full extent of the cyberattack. It is not yet known who is behind the attack, but the Norwegian National Security Authority (NSM) has confirmed that it shares characteristics with other recent cyberattacks.
Norad has established that information related to applications submitted by three organizations outside Norway has been compromised. It is possible that additional organizations may also be affected.
– Norad has mobilized its crisis management team to respond to the incident. The attack is complex. While we have a good understanding of the incident, we are engaging external cybersecurity experts to ensure we have a complete picture of the attack. They will provide us with a detailed assessment of what information the attackers gained access to, says Torger Kjeldstad, Director of Digitalization at Norad.
Norad has notified the Norwegian Data Protection Authority (Datatilsynet) and the Norwegian National Security Authority (NSM), and has reported the incident to the police.
– This is a serious incident. The portal was closed down immediately, and we are still working to determine the full extent of the attack. At this stage, we do not know who is behind it. Our digital services must be safe to use, and we will do everything we can to get to the bottom of what has happened, says Torger Kjeldstad.
– It is important for us to inform those affected. Yesterday, we notified the owners of the 27 user accounts that were used in the attack. We are now working to inform the 20,614 registered users and the three organizations that we know have been affected, says Kjeldstad.
The attack was discovered on 30 October. The attackers gained access to the portal by abusing 27 user accounts to log in. Norad has informed the owners of those accounts.
The Grants Portal has 20,614 users from around the world, representing 12,511 different organizations. The portal has been in use since 2017.
Norad cannot rule out the possibility that the names of applicants operating in conflict zones and authoritarian states may have been accessed.
– We view this as an extremely serious matter. It is now critical that we gain a complete understanding of the attack and its potential consequences, says Kjeldstad.
The Grants Portal is a digital platform used by the Ministry of Foreign Affairs and Norad for applications for funding for development assistance and development projects. It serves applicants and partners from around the world. The Grants Portal is used for applications submitted in response to calls for proposals. Funding for multilateral organisations such as the UN is not processed through the Grants Portal. Norad is responsible for operating the portal. Applications are not assessed, and funding is not disbursed through the Grants Portal.
Press : [email protected], +47 977 14 966
This article will be updated.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
