Norwegian state-owned lottery and gaming operator Norsk Tipping was hit by a secondary cyberattack on Wednesday evening, marking the second consecutive day the sovereign lottery operator has faced hostile network traffic overloads across its central consumer platforms.

Mitigating High Volume DDoS Traffic
Sovereign security logs confirm the business was targeted by a Distributed Denial-of-Service (DDoS) wave that triggered severe connection slowdowns across its digital application and website infrastructure. Norsk Tipping’s security operations center coordinated emergency mitigation protocols alongside primary national telecommunications provider Telenor to filter out the malicious traffic blocks and insulate core player balances. By late evening, internal administrators confirmed the traffic influx had been brought under control, though monitoring teams remained on high alert throughout the night to prevent secondary automated exploits.
The sequential digital attack followed a highly similar DDoS wave launched against the Hamar-headquartered operator on Tuesday evening. While technical teams successfully cleared the initial network blockage after a few hours of downtime, the secondary Wednesday incident was categorized by security managers as a significantly larger, more coordinated cyber campaign.
The initial Tuesday attack had completely overloaded multiple interactive game sub-systems, with the operator’s popular KongKasino lobby experiencing the most severe downtime and drop-off metrics before traffic patterns normalized. State investigators have not yet publicized definitive data regarding the geographic origin or identity of the perpetrators.
Insulated Data Networks
Unlike sophisticated malware injections or targeted database breaches, standard DDoS attacks operate simply by flooding external-facing servers with immense, automated volumes of synthetic traffic to force platform slowdowns or temporary service drops. Because the attack profile targets connectivity rather than underlying databases, Norsk Tipping confirmed that zero user profiles, financial records, or personal customer data fields were compromised during the multi-day event.
Anne Marit Sletten, Senior Communications Adviser at Norsk Tipping, confirmed that Telenor infrastructure teams focused immediately on scrubbing incoming requests:
“This is a new DDoS attack tonight that is causing delays in our services. Telenor is working to filter out unwanted traffic.”
Pål Enger, Head of Press and Public Affairs at Norsk Tipping, stated that while systems have stabilized, the company is actively investigating the deliberate nature of the exploit:
“Everything indicates that we have the situation under control, but we will continue monitoring throughout the night to be completely certain. We have no information about who is behind the attack. However, it is clear that someone has singled us out as a target. They are flooding our systems with traffic, causing our websites and services to slow down. This is a deliberate attack against us.”

