On August 3, 2026, several Norwegian digital services, including ID-porten, experienced significant disruptions due to a denial-of-service (DDoS) attack. The attack, which began around 00:50 CEST, primarily impacted ID-porten, operated by Digdir's partner Vivicta. This outage affected users' ability to log in to public services.

While most other solutions initially functioned, users reported instability and varying response times. By 13:40 CEST, traffic began to recover, though full normalization was expected to take time. Later updates indicated a large increase in errors in ID-porten, with mitigating measures being implemented. Most other solutions were reported to be functional by 22:46 CEST, but residual instability was still possible.

The incident affected a wide range of services beyond ID-porten, including Kontakt- og reservasjonsregisteret, Maskinporten, MinID, eFormidling, ELMA, eInnsyn, Ansattporten, Selvbetjeningsløsninger, and Altinn. Digdir and Vivicta worked collaboratively to resolve the issues.