Back

Norad cyberattack exposes data of 20,614 Grants Portal users
SiTech AI Team2 min read

Norad cyberattack exposes data of 20,614 Grants Portal users

Norwegian aid agency Norad says a cyberattack on its Grants Portal exposed names and email addresses of 20,614 registered users after attackers abused 27 accounts and stole data from at least three organizations.

Norway's national aid agency, Norad, has confirmed it was targeted by a cyberattack that potentially exposed the personal details of 20,614 users of Norad's Grants Portal. The agency found that attackers compromised and abused 27 user accounts, stole information from at least three organizations, and prompted Norad to take the portal offline while it notifies affected users.

What was exposed

The Norwegian Agency for Development Cooperation (Norad) discovered that the names and email addresses of 20,614 registered users of the Grants Portal have been compromised. Attackers gained access by compromising and abusing 27 user accounts and successfully stole information from at least 3 organizations, although more may have been impacted.

Portal role and funding

Norad's Grants Portal is a digital application and administrative system through which multilateral organizations can apply for financial support. The portal has been in use since 2017 and represents 12,511 organizations worldwide. It oversees billions of euros in development funding. In 2025, the agency managed around 32 billion Norwegian kroner, or approximately €2.7 billion, in development aid, and it handles sensitive information from people and organizations around the world.

Response and investigation

The portal was immediately taken offline, and the agency is working to inform all affected registered users and the three organizations that have been impacted. Norad mobilized its crisis management team, and Director of Digitalization Torger Kjeldstad said the attack is complex and that external cybersecurity experts are being engaged to ensure a complete picture of the attack. "We view this as an extremely serious matter. It is now critical that we gain a complete understanding of the attack and its potential consequences," Kjeldstad said. The Norwegian Data Protection Authority (Datatilsynet), the Norwegian National Security Authority (NSM), and the police have been informed.

Sources: Cybernews

SiTech

SiTech — AI-powered web development

We build fast, modern websites and bring AI into real business workflows. Have a project or a question? We'd love to help.