Overview

• Director Beate Gangås publicly attributed the April 7 breach at Lake Risevatnet dam to pro-Russian actors, marking Oslo’s first formal attribution of the incident
• Attackers opened a floodgate remotely for about four hours, releasing roughly 500 litres of water per second before operators shut the valve, without causing injuries or damage
• Investigators say the hackers likely exploited a weak password on a web-accessible control panel, underscoring persistent vulnerabilities in industrial control systems
• The Russian embassy in Oslo dismissed the attribution as politically motivated and unfounded, intensifying a diplomatic dispute over the incident
• Norwegian authorities have issued public warnings and enhanced monitoring as part of broader efforts to counter similar hybrid cyber operations across Europe