Digdir said a large DDoS attack against its IT partner Vivicta has disrupted about 10 Norwegian government digital services for roughly 30 hours, including ID-porten, login, data exchange, and public-records functions. Some services were gradually coming back online as Digdir and Vivicta worked to stabilize the affected systems.
The attack did not break into the services; it flooded the shared infrastructure with traffic until legitimate users could not get through. Because identity verification, inter-agency exchange, and some health services all route through that same partner layer, one outage took multiple government functions down at once.
This is the third DDoS to hit Digdir since June, and the repeated pattern points to a platform dependency, not an isolated service hiccup. If a single partner sits in front of authentication and data exchange, availability problems there become availability problems for every service that inherits that choke point.