Breaches · 19h ago
Norad confirmed a cyberattack that stole names and email addresses for all 20,614 registered users of its grant portal, The Register reported.
Norad also said information from applications by at least three organizations was “misdirected.” It cannot confirm whether information about people in conflict areas or authoritarian states was exposed. The report does not specify what those applications contained or whether that information was accessed.
If those applications included sensitive information about people in high-risk places, Norad’s uncertainty leaves aid partners unable to tell from this report who may face personal risk.
2 sources covering this story
Cyberattack on Norway’s aid agency may have swept up all user data - Help Net Security
A breach of Norad’s Grants Portal may have exposed names and emails of all 20,614 users, and applicants in conflict zones could be affected.
Norway's aid agency pwned and all users' data is stolen
Norad said it cannot be sure that the details of those in 'conflict areas and authoritarian states' are safe or not
Part of the PlainSec briefing for 2026-11-06