[REVISION HISTORY]

Norway data breach incidents

Updated 3 times since CLSTR started tracking revisions of this situation.

What changed

2026-08-10 10:11 UTC → 2026-08-10 15:13 UTC · added ~~removed~~

In May 2026, Lørenskog municipality’s IT systems were compromised, leaking about 1.8 TB of files that included water-supply network documents, child-welfare case files, patient records, school documents and other critical-infrastructure information. Municipal authorities convened an emergency council meeting, warned that publicizing security details could invite further attacks, and set up a crisis team and a resident hotline. In early August 2026, electric-scooter rental firm Ryde announced that an unauthorized party had accessed its customer database, copying contact details, birth dates and partial payment-card information. Ryde assured users that full card numbers were stored elsewhere, advised no immediate action, and reported the incident to police while beginning remedial steps. The announcement reiterated the earlier Lørenskog breach, noting ongoing concerns for residents whose personal data had been exposed. A follow-up report on 2 August revealed that the Ryde intrusion affected an estimated 4.5 million users in Norway, Sweden, Finland and Germany. Leaked data included mobile phone numbers, e-mail addresses, dates of birth and the first six and last four digits of payment cards. Full card numbers remained with Ryde’s payment-service provider. Ryde filed a police report, and Norway’s data-protection authority Datatilsynet opened an investigation, with senior adviser Eirik Gulbrandsen pledging support for affected users. Ryde’s CEO Tobias Balchen confirmed system operation and warned customers to watch for phishing attempts. By 10 August, further details emerged regarding the Ryde breach, which was discovered between 2 and 3 August. In Norway alone, the incident impacts approximately 1.6 million accounts, representing nearly 30 percent of the population. Beyond contact and partial payment details, some users may have had unverified names, addresses, and payment histories for rides and purchases compromised. Ryde stated that unauthorized access was halted shortly after detection, though investigations continue.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.