Norad grants portal breach may have exposed 20,614 users
Original title: Cyberattack on Norway’s aid agency may have swept up all user data
Attackers used 27 compromised logins found on October 30; the portal is shut and police were notified.
Norway’s development aid agency Norad says a cyberattack on its Grants Portal may have exposed names and email addresses of all 20,614 registered users, representing 12,511 organizations. Intruders logged in with 27 compromised accounts and stole applications and supporting documents from three organizations outside Norway. The portal was closed immediately. Norad has notified police, Datatilsynet and NSM and is hiring outside experts.
Unconfirmed: Norad does not know who attacked, the full data taken, or whether more organizations were affected.
- The portal has been in use since 2017 for aid funding applications.
- Norad cannot rule out exposure of applicants in conflict zones and authoritarian states.
- NSM said the attack shares characteristics with other recent cyberattacks, without naming them.
- Norad is notifying the 20,614 users and the three known affected organizations.
Impact: Names, emails and some aid applications may have been accessed
- ATT&CK
- T1078 Valid Accounts
From the original article
2 min read at helpnetsecurity.com
The names and email addresses of 20,614 people registered on Norad’s Grants Portal may have ended up in the hands of attackers, Norway’s development aid agency has disclosed. Norad, short for the Norwegian Agency for Development Cooperation, works with partners around the world on development aid.
By Sinisa Markovic · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.