Norway Counter-Intelligence Agency Attributes Dam Sabotage to Russian Hackers

Published
Written by:
Lore Apostol
Lore Apostol
Cybersecurity Writer

Norway's counter-intelligence agency has officially attributed the Bremanger dam sabotage in April to Russian hackers. Beate Gangaas, head of Norway's PST security police agency, confirmed the attribution during a recent speech, highlighting the changing tactics of pro-Russian cyber actors.  

Details of the Incident  

On April 7, attackers gained control of a hydroelectric dam in Bremanger, western Norway. By manipulating the infrastructure, they opened a floodgate, releasing 500 liters (132 gallons) of water per second over a four-hour period. 

The breach was detected and stopped without causing injuries, but the incident has revealed vulnerabilities in Norway’s critical energy infrastructure. Hydropower is a key pillar of Norway's energy system, making such attacks significant threats to energy security. 

"The aim of this type of operation is to influence and to cause fear and chaos among the general population," Gangaas said, according to Reuters.

Broader Implications  

Norway, a NATO member and Europe's largest gas supplier, plays a vital role in the continent's energy security. This attack reflects the rising risk of cyberattacks against critical infrastructure, particularly as Norway supports Ukraine amidst increasing geopolitical tensions with Russia

The incident marks an evolving shift in patterns of Russian cyber aggression, said Gangaas, who also warned of continued threats. The energy sector, being a high-stakes target, requires enhanced cybersecurity measures as part of national defense strategies.  

Last September, Britain's spy chief accused Russia of waging a sabotage campaign in Europe, which Moscow then denied. In May, the APT28 Russian state campaign against Western firms to gather Ukraine aid intel intensified, and Russia-affiliated Void Blizzard impersonated the European defense & security summit in phishing emails.

Official and Political Response  

The Russian Embassy in Oslo dismissed the claims as "politically motivated" and without basis, stating to Reuters that "It is obvious that the PST is unsuccessfully trying to substantiate the mythical threat of Russian sabotage against Norwegian infrastructure this year, which it itself invented in its February (annual) report.”

However, Gangaas emphasized that transparency about such threats is crucial for public preparation and deterrence. 

Norway's decision to attribute the attack publicly aims to strengthen national resilience and international cooperation in combating cybersecurity threats.  


For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: