Skip to content
NewA calmer, faster ZeroHour
StoryData breachhigh

Norad Grants Portal breach may have exposed all users

2 sources · 2 articlesFirst reported Updated ()1
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Norad closed its Grants Portal after an October 30 attack using 27 logins that may have exposed all 20,614 users.

Norway’s aid agency Norad confirmed a cyberattack on its Grants Portal, used since 2017 for aid funding applications. Attackers logged in with 27 compromised accounts found on October 30 and stole applications and supporting documents from three organizations outside Norway. The Register says information about each of the 20,614 registered users was stolen. Help Net Security reports Norad may have exposed names and emails of those users, representing 12,511 organizations, and cannot rule out applicants in conflict zones and authoritarian states. The portal was closed immediately. Norad notified police, Datatilsynet and NSM, is contacting users, and is hiring outside experts. According to Help Net Security, NSM said the attack shares characteristics with other recent cyberattacks without naming them.

Key facts
  • Twenty-seven compromised logins were found on October 30.
  • Applications and documents were stolen from three organizations outside Norway.
  • The portal covers 20,614 users across 12,511 organizations.
  • Norad notified police, Datatilsynet and NSM and is hiring experts.
  • NSM said the attack resembles other recent, unnamed cyberattacks.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 30, 2026Norad detected the Grants Portal intrusion · The Register

What each outlet adds

beyond the shared facts
  • The RegisterStates information on all 20,614 users was stolen.
  • Help Net SecurityAdds organization count, agencies notified, and NSM comparison.
Vendors
Norad
Products
Grants Portalgrant portal
Victims
Norad
Organizations
Norwegian Agency for Development CooperationNorwegian Data Protection AuthorityNorwegian National Security AuthorityMinistry of Foreign AffairsNorway Ministry of Foreign Affairs
Countries
Norway

Coverage

oldest first · one row per article · UTC
  1. · 5d ago The Register · SecurityFirst report

    Norad confirms data breach of 20614 users

    Norad's grant portal had 20614 user accounts compromised with names and emails stolen

  2. · 5d ago Help Net Security

    Norad grants portal breach may have exposed 20,614 users

    Attackers used 27 compromised logins found on October 30; the portal is shut and police were notified.