Norway reveals shocking details of a Russian cyberattack that briefly controlled critical infrastructure in western regions during a coordinated assault. The unprecedented breach demonstrates escalating digital warfare targeting European energy systems and civilian populations across multiple vulnerable sectors. Intelligence officials warn this represents a dangerous shift in Russian tactics specifically designed to spread fear and uncertainty across Nordic nations. This revelation marks the first official attribution of such sophisticated attacks, signaling dramatically heightened tensions in the strategically important Arctic region.
Russian hackers gained control of Norway’s critical dam infrastructure
Russian hackers briefly took control of a dam in Norway earlier this year, the head of the Nordic country’s counter-intelligence agency said on Wednesday, the first time Oslo has officially attributed the cyberattack to its neighbour.
While in command of the dam in Bremanger, western Norway, on April 7, the hackers opened a flood gate and released 500 litres (132 gallons) of water per second for four hours before the attack was detected and stopped, authorities previously said.
No one was injured during the attack.
Norway produces most of its electricity via hydropower dams, and intelligence authorities have previously warned of the risk of attacks on its energy infrastructure.
“Over the past year, we have seen a change in activity from pro-Russian cyber actors,” Beate Gangaas, head of Norway’s PST security police agency, said in a speech.
The incident at Bremanger was one such activity, Gangaas added.
Security experts emphasize that hydropower infrastructure vulnerabilities expose critical weaknesses in European energy systems that require immediate attention and enhanced protection measures. The sophisticated nature of this attack demonstrates advanced capabilities that could potentially target multiple facilities simultaneously, creating cascading failures across interconnected power grids throughout the region.
“The aim of this type of operation is to influence and to cause fear and chaos among the general population,” she said. “Our Russian neighbour has become more dangerous.”
The Russian embassy in Oslo said Gangaas’ declarations were “unfounded and politically motivated”.
Norway decided to publicly reveal this cyberattack attribution now
“It is obvious that the PST is unsuccessfully trying to substantiate the mythical threat of Russian sabotage against Norwegian infrastructure this year, which it itself invented in its February (annual) report,” it said in an emailed statement to Reuters.
Last September, Britain’s spy chief accused Russia of waging a “staggeringly reckless campaign” of sabotage in Europe, partly to scare European countries from helping Ukraine. Moscow denies the allegation.
After her speech, Gangaas told Reuters that she was going public with the attribution to warn the general population and to try to prevent Russia from launching further attacks.
“I want Norwegians to be prepared,” she said in an interview.
Intelligence analysts note that public attribution strategies serve as both deterrent measures and warning systems for potential future attacks on critical infrastructure. This transparency approach represents a significant shift from traditional intelligence practices, where such information would typically remain classified to protect operational security and ongoing investigations.
What this mean for European energy security and infrastructure protection
NATO-member Norway shares a border with Russia in the Arctic. Like the other Nordic countries, it is a staunch supporter of Ukraine. It is also Europe’s largest supplier of gas, which is mostly transported via a network of pipelines under the North Sea.
Norway’s decision to publicly attribute this dam attack represents a significant escalation in cyber warfare transparency and accountability measures. The revelation underscores growing concerns about Russian capabilities to disrupt civilian infrastructure across European nations actively supporting Ukraine’s defense efforts. As digital attacks become increasingly sophisticated and brazen, Nordic countries must strengthen their defensive capabilities and enhance international cooperation frameworks. This incident serves as a critical wake-up call for all NATO members to comprehensively reassess their critical infrastructure vulnerabilities.
GCN.com/Reuters