{
  "id": "3a438edc-cec2-4588-ab0a-e341aa331899",
  "url": "https://politico.eu/article/russian-hackers-took-control-norwegian-dam-police-chief-says",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)",
  "country": "Norway",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Russian hackers",
    "Norway",
    "cyberattacks",
    "Hybrid warfare",
    "Critical infrastructure",
    "Dam sabotage",
    "Pro-Russian cyber operations"
  ],
  "nodes": [],
  "countries": [],
  "where_text": "Cyberspace",
  "headline": "Russian hackers took control of Norwegian dam, police chief says",
  "description": "In April 2023, pro-Russian hackers breached the control system of a dam in Bremanger, southwestern Norway, opening valves for four hours and causing large volumes of water to gush out until the valves were shut. The incident was disclosed by Beate Gangås, chief of the Norwegian Police Security Service (PST), during a public event addressing pro-Russian cyber operations. The hackers exploited a security gap, reportedly a weak password, in a dam not used for energy production approximately 150 kilometers north of Bergen. Norwegian officials stressed that cyberattacks on Western infrastructure are increasing as part of Russia's hybrid warfare strategy to demonstrate capability rather than cause direct damage. Nils Andreas Stensønes, head of the Norwegian Intelligence Service, identified Russia as Norway's biggest security threat. A similar water facility hacking incident occurred in Texas in January 2024, linked to Kremlin-associated hackers.",
  "summary_short": "Pro-Russian hackers breached a dam control system in Bremanger, Norway, in April 2023, opening valves for hours and causing water to gush out; incident disclosed by Norwegian Police Security Service.",
  "summary_extended": "In April 2023, hackers suspected of being pro-Russian gained control of a dam in Bremanger, Norway, by breaching its control system and opening valves for four hours, resulting in uncontrolled water flow. The dam is located approximately 150 kilometers north of Bergen and is not used for energy production. Norwegian Police Security Service (PST) chief Beate Gangås revealed the incident while discussing rising cyberattacks on Western infrastructure as part of Russia's hybrid warfare strategy, which aims more to showcase capabilities than inflict physical damage. Nils Andreas Stensønes, head of the Norwegian Intelligence Service, confirmed Russia as the top security threat to Norway. The hackers likely exploited a weak password to access the dam controls. A similar attack occurred in January 2024 on a water facility in Texas, also linked to Kremlin-associated actors. The incident highlights growing concerns over infrastructure vulnerabilities amid ongoing cyber aggression from Russia.",
  "actor_primary": "pro-Russian hackers",
  "target_primary": null,
  "location_text": "Bremanger municipality",
  "location_region": "Vestland",
  "location_coordinates_lat": 61.8894,
  "location_coordinates_lon": 5.0801,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "Classified as aggressor event because the article describes a specific incident where pro-Russian hackers compromised a Norwegian dam control system causing operational disruption. There is no indication of allied defensive preparations in this article.",
  "event_time_utc": "2023-04-01T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-14T12:22:50.128Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "low",
  "attribution_basis": "single_source"
}

{
  "id": "3a438edc-cec2-4588-ab0a-e341aa331899",
  "url": "https://politico.eu/article/russian-hackers-took-control-norwegian-dam-police-chief-says",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)",
  "country": "Norway",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Russian hackers",
    "Norway",
    "cyberattacks",
    "Hybrid warfare",
    "Critical infrastructure",
    "Dam sabotage",
    "Pro-Russian cyber operations"
  ],
  "nodes": [],
  "countries": [],
  "where_text": "Cyberspace",
  "headline": "Russian hackers took control of Norwegian dam, police chief says",
  "description": "In April 2023, pro-Russian hackers breached the control system of a dam in Bremanger, southwestern Norway, opening valves for four hours and causing large volumes of water to gush out until the valves were shut. The incident was disclosed by Beate Gangås, chief of the Norwegian Police Security Service (PST), during a public event addressing pro-Russian cyber operations. The hackers exploited a security gap, reportedly a weak password, in a dam not used for energy production approximately 150 kilometers north of Bergen. Norwegian officials stressed that cyberattacks on Western infrastructure are increasing as part of Russia's hybrid warfare strategy to demonstrate capability rather than cause direct damage. Nils Andreas Stensønes, head of the Norwegian Intelligence Service, identified Russia as Norway's biggest security threat. A similar water facility hacking incident occurred in Texas in January 2024, linked to Kremlin-associated hackers.",
  "summary_short": "Pro-Russian hackers breached a dam control system in Bremanger, Norway, in April 2023, opening valves for hours and causing water to gush out; incident disclosed by Norwegian Police Security Service.",
  "summary_extended": "In April 2023, hackers suspected of being pro-Russian gained control of a dam in Bremanger, Norway, by breaching its control system and opening valves for four hours, resulting in uncontrolled water flow. The dam is located approximately 150 kilometers north of Bergen and is not used for energy production. Norwegian Police Security Service (PST) chief Beate Gangås revealed the incident while discussing rising cyberattacks on Western infrastructure as part of Russia's hybrid warfare strategy, which aims more to showcase capabilities than inflict physical damage. Nils Andreas Stensønes, head of the Norwegian Intelligence Service, confirmed Russia as the top security threat to Norway. The hackers likely exploited a weak password to access the dam controls. A similar attack occurred in January 2024 on a water facility in Texas, also linked to Kremlin-associated actors. The incident highlights growing concerns over infrastructure vulnerabilities amid ongoing cyber aggression from Russia.",
  "actor_primary": "pro-Russian hackers",
  "target_primary": null,
  "location_text": "Bremanger municipality",
  "location_region": "Vestland",
  "location_coordinates_lat": 61.8894,
  "location_coordinates_lon": 5.0801,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "Classified as aggressor event because the article describes a specific incident where pro-Russian hackers compromised a Norwegian dam control system causing operational disruption. There is no indication of allied defensive preparations in this article.",
  "event_time_utc": "2023-04-01T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-14T12:22:50.128Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "low",
  "attribution_basis": "single_source"
}