The Register reports that names and email addresses were stolen; Norad says attackers may have accessed them and took application information from at least three organizations.
Norway’s national aid agency, Norad, says attackers may have accessed the names and email addresses of all 20,614 of its grant portal’s registered users. It confirms that application information from at least three organizations outside Norway was taken and says more affected organizations may be identified.
The Register described the contact details as stolen. Norad’s own announcement uses the more cautious wording that attackers may have accessed them.
Norad operates the platform jointly used by the agency and Norway’s Ministry of Foreign Affairs for applications for aid and development projects worldwide. Its registered users represent 12,511 organizations. Application assessments and grant payments do not take place through the portal.
Norad says attackers misused 27 login accounts to enter the portal. That is the number of accounts used in the intrusion, not the total population whose contact details may have been exposed. The agency detected the attack on 30 October 2026 and says it shut the portal immediately.
Norad has not identified who was responsible or said how the accounts were compromised or how long attackers had access. Its announcement says Norway’s National Security Authority has confirmed similarities to other recent cyberattacks.
Norad cannot rule out that attackers took names of applicants in conflict areas and authoritarian states. Torger Kjeldstad, its director of digitalization, says the agency is still establishing what consequences the attack could have.
Norad says it has notified the owners of the accounts used in the attack and is working to inform all registered users and the organizations confirmed affected. It has also notified Datatilsynet and the National Security Authority and reported the incident to police.
Kjeldstad says it “should be safe” to use Norad’s services while the investigation continues. Norad has not said whether the grant portal has reopened.
The agency has activated a crisis team. Kjeldstad describes the attack as complex and says Norad is working to engage external cybersecurity experts to establish precisely what information attackers accessed. Norad says it will update its announcement as the investigation continues.
Prime Minister Nikol Pashinyan says the initiative will develop expertise in educational institutions and laboratories exploring how to integrate superintelligence (SI) with physical objects.
3 min
Ofwat, the Environment Agency and the UK government warned that the company’s leakage failures increase the risk of customers losing supplies during drought. Their 26 October letter requires a plan for the government and regulators within 6 weeks.
3 min
The agency says the ongoing campaign uses victims' payment and disbursement systems to move money and identifies four tools: ARTEX, PentAGI, Cairn and CyberStrikeAI.
2 min
