data Breach in Norway: Sensitive Information Exposed After Redaction Errors
Norwegian authorities are scrambling to contain a significant data breach affecting at least 150 individuals, after errors in handling public access requests led to the inadvertent sharing of confidential information, including names and social security numbers.
The Ministry of Digitization and Public Governance has ordered a nationwide halt to the release of redacted documents until a thorough review can ensure no further personal data is compromised. The initial finding,made on Friday,November 21,2025,stemmed from a notification by the State Administrator in the Interior,and has since expanded to include deviations in six state administration offices,including those in Troms and Finnmark.
The scope of the breach is currently estimated to encompass data released over the past two to three years, with officials anticipating the number of affected individuals will likely increase as investigations progress. According to a statement from the State Administrator in Innlandet, “It is indeed very serious.”
The incident centers around Norway’s open-records laws, which grant citizens the right to access documents held by public authorities. While personally sensitive information is supposed to be redacted, the errors revealed indicate a systemic failure in this process. The State Administrator’s offices handle critical matters relating to schools, education, and child protection, raising concerns about the sensitivity of the exposed data.
Following notification of the issue, the State Administrator in the Interior promptly established a “crisis staff” and suspended all outgoing access requests. A significant portion – an estimated 90-95% – of the improperly redacted documents were reportedly sent to members of the press. Officials are now urging recipients to carefully handle the documents and limit potential damage. “I think ther is a good tradition in newsrooms to handle information in a good way,” stated a senior official, adding that affected individuals will be contacted within days.
Minister of Digitization and Public Administration Karianne Tung (Ap) emphasized the gravity of the situation in a press release.”when the ministry became aware of the discrepancy, we immediately asked all the offices to stop all sending of redacted documents until they had made sure that no personal data was included with the document,” she stated.
The Norwegian Data Protection Authority has been notified and will conduct a full examination into the extent of the breach and the adequacy of existing safeguards. Janne Stang Dahl, director of communications at the authority, confirmed receipt of notifications from both the State Administrator in the Interior and the State Administrator in Troms and Finnmark. “We received a notice of deviation at the weekend. Now we will look in more detail at the extent and significance it may also have for those affected. And then we will look at which, both technical and organizational measures, have been put in place,” Dahl explained.
State Administrator in the Interior,Knut Storberget,issued a profuse apology to those affected. “We take seriously the fact that confidential information has been released, and we apologize profusely to those affected. We will now contact those affected,” Storberget said. The initial report of the breach
Why did this happen? the data breach occurred due to errors in the redaction process when fulfilling public access requests.A systemic failure in properly removing sensitive information from documents before release led to the exposure of names and social security numbers.
Who was affected? At least 150 individuals have been confirmed as affected,but officials
