# Nordic cyber threat level escalation > Live situation record from CLSTR: https://clstr.news/situations/nordic-cyber-threat-level-escalation > Updated: 2026-10-27T15:49:06.000Z. Sources: 9. Developments: 2. In early October, Denmark raised its cyberattack threat level from medium to high due to intelligence suggesting an increased willingness by Russia to engage in sabotage against Denmark and other NATO members. Authorities warned of potential wiper attacks and the manipulation of operational technology to disrupt critical infrastructure, such as heating plants and production lines. Concurrently, research into Danish defense companies identified significant security vulnerabilities that could be exploited in hybrid warfare. By late October, Norway’s National Security Authority (NSM) raised its national cyber threat level to the second-highest level, noting that successful cyberattacks against Norwegian organizations had tripled over a six-month period. The agency identified the defense industry, the space sector, and critical infrastructure as particularly exposed. While the report did not officially attribute the surge to a specific actor, it highlighted risks from reconnaissance, ransomware, and the use of artificial intelligence to identify vulnerabilities at scale. A notable incident involving the municipality of Lørenskog was highlighted, where significant amounts of data were stolen and offered for sale on the dark web. NSM Director Arne Christian Haugstøyl stated that making the assessment public was intended to “strengthen the resilience and management capabilities of Norwegian organizations.” In response to these heightened risks, including DDoS attacks and AI-driven vulnerability identification, the NSM has proposed 21 specific measures for Norwegian businesses to implement to improve digital resilience. ## Claims - The NSM has not previously made this type of assessment public. (corroborated by 8 sources) - The number of successful cyberattacks against Norwegian organizations has tripled in the last year. (corroborated by 7 sources) - The defense industry and space sector are particularly exposed to cyber risks. (corroborated by 5 sources) - Artificial intelligence poses a serious risk by helping attackers find vulnerabilities faster and operate at a larger scale. (corroborated by 5 sources) - Norway's national cyber threat level has been raised to the second-highest level. (corroborated by 4 sources) - Organizations are facing increased reconnaissance, ransomware, and DDoS attacks. (corroborated by 4 sources) - The NSM has proposed 21 measures for Norwegian businesses to implement. (single source) ## Timeline ### 2026-10-27: Norway raises national cyber threat level to second-highest Norway's NSM has raised the national cyber threat level to 'high' after successful cyberattacks tripled in the last year, citing risks to defense, space, and critical infrastructure. 9 sources. https://clstr.news/cluster/norway-raises-cyber-threat-level-as-successful-attacks-triple ### 2026-10-05: Denmark raises cyberattack threat level amid Russian sabotage risks Denmark has raised its cyberattack threat level to high due to potential Russian sabotage. Meanwhile, a study shows many Danish defense companies lack the basic IT security needed to prevent such attacks. 2 sources. https://clstr.news/cluster/denmark-raises-cyberattack-threat-level-amid-russian-sabotage-risks --- Cite as: Nordic cyber threat level escalation. CLSTR, https://clstr.news/situations/nordic-cyber-threat-level-escalation