Norway’s aid agency pwned and all users’ data is stolen

Norway’s national aid agency Norad says cyber criminals accessed its grant portal and stole information on every registered user. The breach could put people and organisations working in sensitive settings at risk, as the agency cannot rule out that applicants in conflict areas or authoritarian states were identified.

The portal had 20,614 registered users across 12,511 organisations; their names and email addresses were taken. Applications from at least three organisations were also affected, and Norad says further cases may emerge. The attack was detected on 30 October after 27 compromised accounts were used to access the portal; investigators have not established how long the attackers had access or who was responsible.