<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>Norway's aid agency Norad says attackers took names and emails of all 20,614 Grants Portal users · updates</title>
  <link>https://pwn.watch/i/norad-grants-portal-breach-nov-2026</link>
  <description>Norad, Norway's development aid agency, says attackers abused 27 user accounts to log in to its Grants Portal, the platform the Ministry of Foreign Affairs and Norad use for aid and development funding applications from around the world. The attack was discovered on Oct 30 2026 and the portal was shut down immediately. The attackers may have gained access to the names and email addresses of all 20,614 registered users from 12,511 organizations, and applications and supporting documents from at least three organizations outside Norway were taken, possibly more. Norad cannot rule out that names of applicants working in conflict zones and authoritarian states were accessed. It does not know who is behind the attack; Norway's National Security Authority (NSM) says it shares characteristics with other recent attacks. Norad has notified the data protection authority and NSM, reported the incident to the police, set up a crisis team and is bringing in outside experts.</description>
  <language>en</language>
  <lastBuildDate>Thu, 05 Nov 2026 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/i/norad-grants-portal-breach-nov-2026/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>Norway's aid agency Norad says attackers took names and emails of all 20,614 Grants Portal users: The Register reports Norad is bringing in outside cybersecurity experts and has not said how long the attackers had access.</title>
    <link>https://pwn.watch/i/norad-grants-portal-breach-nov-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/norad-grants-portal-breach-nov-2026#2026-11-05-65c40e2e</guid>
    <pubDate>Thu, 05 Nov 2026 00:00:00 GMT</pubDate>
    <category>medium</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.theregister.com/cyber-crime/2026/11/05/norways-aid-agency-pwned-and-all-users-data-is-stolen/5307765&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Norway's aid agency Norad says attackers took names and emails of all 20,614 Grants Portal users: Norad sets up a crisis team and tells Panorama it cannot rule out that names of applicants in conflict zones or authoritarian states were taken.</title>
    <link>https://pwn.watch/i/norad-grants-portal-breach-nov-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/norad-grants-portal-breach-nov-2026#2026-11-04-f72b120b</guid>
    <pubDate>Wed, 04 Nov 2026 00:00:00 GMT</pubDate>
    <category>medium</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.panoramanyheter.no/krig-og-konflikt-menneskerettigheter-norad/norad-har-satt-krisestab-sensitiv-informasjon-om-partnere-i-konfliktomrader-kan-vaere-stjalet/434933&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Norway's aid agency Norad says attackers took names and emails of all 20,614 Grants Portal users: Norad discloses the attack: names and email addresses of all 20,614 registered users may have been accessed and applications from at least three organizations outside Norway were taken. It has notified the 27 account owners, Datatilsynet and NSM, and reported it to the police; NSM says it resembles other recent attacks.</title>
    <link>https://pwn.watch/i/norad-grants-portal-breach-nov-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/norad-grants-portal-breach-nov-2026#2026-11-03-dbbf93d9</guid>
    <pubDate>Tue, 03 Nov 2026 00:00:00 GMT</pubDate>
    <category>medium</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.norad.no/en/news/news/2026/norad-targeted-by-cyberattack/&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Norway's aid agency Norad says attackers took names and emails of all 20,614 Grants Portal users: Norad discovers the attack on its Grants Portal, where attackers logged in by abusing 27 user accounts, and shuts the portal down immediately.</title>
    <link>https://pwn.watch/i/norad-grants-portal-breach-nov-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/norad-grants-portal-breach-nov-2026#2026-10-30-97cbcd03</guid>
    <pubDate>Fri, 30 Oct 2026 00:00:00 GMT</pubDate>
    <category>medium</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.norad.no/en/news/news/2026/norad-targeted-by-cyberattack/&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
</channel>
</rss>
