Norway has officially attributed a sophisticated cyberattack on critical infrastructure to Russian hackers, marking a significant escalation in the ongoing digital warfare between Moscow and Western nations. The unprecedented breach of the Bremanger dam represents the first time Oslo has publicly blamed its eastern neighbor for directly targeting Norwegian energy infrastructure through cyber means. This attribution signals Norway’s determination to expose Russian hybrid warfare tactics while highlighting the vulnerability of critical infrastructure systems to state-sponsored cyber threats.
Details of the Russian cyberattack on a dam in Norway
Russian hackers briefly took control of a dam in Norway earlier this year, the head of the Nordic country’s counter-intelligence agency said on Wednesday, the first time Oslo has officially attributed the cyberattack to its neighbour.
While in command of the dam in Bremanger, western Norway, on April 7, the hackers opened a flood gate and released 500 litres (132 gallons) of water per second for four hours before the attack was detected and stopped, authorities previously said.
No one was injured during the attack.
Norway produces most of its electricity via hydropower dams, and intelligence authorities have previously warned of the risk of attacks on its energy infrastructure.
The security agency’s response to a cyberattack on water infrastructure
“Over the past year, we have seen a change in activity from pro-Russian cyber actors,” Beate Gangaas, head of Norway’s PST security police agency, said in a speech.
The incident at Bremanger was one such activity, Gangaas added.
“The aim of this type of operation is to influence and to cause fear and chaos among the general population,” she said. “Our Russian neighbour has become more dangerous.”
The Russian embassy in Oslo said Gangaas’ declarations were “unfounded and politically motivated”.
“It is obvious that the PST is unsuccessfully trying to substantiate the mythical threat of Russian sabotage against Norwegian infrastructure this year, which it itself invented in its February (annual) report,” it said in an emailed statement to Reuters.
The timing and methodology of the Bremanger attack reveal sophisticated planning and execution that bear the hallmarks of state-sponsored cyber operations rather than opportunistic criminal activity. Intelligence analysts note that the hackers demonstrated intimate knowledge of Norwegian dam control systems and deliberately chose a target that would generate maximum psychological impact while avoiding catastrophic damage that could trigger military retaliation. The four-hour duration of the breach suggests the attackers possessed advanced persistent access to critical infrastructure networks, raising serious questions about the security of similar facilities across Europe.
Broader security implications of the Bremanger dam attack
Last September, Britain’s spy chief accused Russia of waging a “staggeringly reckless campaign” of sabotage in Europe, partly to scare European countries from helping Ukraine. Moscow denies the allegation.
After her speech, Gangaas told Reuters that she was going public with the attribution to warn the general population and to try to prevent Russia from launching further attacks.
“I want Norwegians to be prepared,” she said in an interview.
NATO-member Norway shares a border with Russia in the Arctic. Like the other Nordic countries, it is a staunch supporter of Ukraine. It is also Europe’s largest supplier of gas, which is mostly transported via a network of pipelines under the North Sea.
Norway’s attribution of the Bremanger dam attack to Russian hackers marks a watershed moment in the escalating cyber conflict between Russia and the West. The incident demonstrates Moscow’s willingness to target civilian infrastructure as part of its broader hybrid warfare strategy against NATO allies supporting Ukraine.
This public attribution signals Norway’s commitment to transparency in exposing Russian cyber operations while highlighting the urgent need for enhanced protection of critical infrastructure systems. The attack serves as a stark reminder that modern warfare increasingly targets the digital foundations of society, requiring unprecedented cooperation between nations to defend against state-sponsored cyber threats.
GCN.com/Reuters
