Hackers breached Norwegian dam’s control system for hours

Unidentified hackers succeeded in taking over a Norwegian dam's control systems for hours. There was no immediate danger to the public.

According to British news outlet Hackread, the incident occurred at the Lake Risevatnet dam, near the city of Svelgen in Southwest Norway.

The dam’s owner, Breivika Eiendom, discovered on April 7th that hackers had accessed the dam’s control systems, causing its water valve to open.

A few days later, on April 10th, Norwegian authorities were informed of the incident, including the National Security Authority (NSM), the Norwegian Water Resources and Energy Directorate (NVE), and Kripos, a special agency of the Norwegian Police Service.

The attackers were able to take control of the dam’s systems because it was protected by a weak password. According to security researchers, the original point of entry allowed the hackers to bypass authentication controls and gain direct access to the dam’s operational technology environment.

According to Norwegian news outlet Energiteknikk, there was no immediate danger to the public. The dam’s valve only released an additional 497 liters per second, while it’s equipped to handle up to 20,000 liters per second.

As of writing, no hacking group has claimed responsibility for the breach.

Protecting businesses and institutions operating in essential infrastructure is of the utmost importance. If not properly protected, hackers can seriously harm society and cripple daily life.

Back in December 2024, security researchers from cybersecurity firm Cyble warned that two Russian hacktivist groups attacked energy and water sectors in the United States.

In one incident, the hackers attacked a water treatment plant in Stanton, Texas, opening valves and releasing untreated water. As in Norway, no damage was done to the public or the environment.