Norsk Tipping AS
August 7, 2026
•[ ddos, hack, technology ]
Norsk Tipping confirmed a new DDoS attack between 20:53 and 21:08 on August 7 that made its services inaccessible to some customers. The company said operations had returned to normal and that it did not know who was responsible. The attack followed restored service after August 4, so it is a distinct disruptive event. No data theft or ransom demand was reported; Sabotage is a contextual inference based on the targeted service interference.
Pozirk (Позірк)
August 8, 2026
•[ ddos, technology, government ]
Pozirk reported a DDoS attack against its online news platform on the morning of August 8, 2026, alongside attacks against Nasha Niva, Zerkalo and Reform.news. The assault coincided with the New Belarus conference in Warsaw. The responsible operator and precise outage duration were not established; no information theft was reported.
Reform.news
August 8, 2026
•[ ddos, government, technology ]
Reform.news reported a DDoS attack against its website on August 8, 2026 as part of concurrent attacks against independent Belarusian news outlets. Reports linked the timing to the New Belarus conference and the anniversary of the 2020 election, without identifying a perpetrator. Reform.news operates from Warsaw under a Polish registered supporting foundation. No data theft was reported.
Nasha Niva (Наша Ніва)
August 8, 2026
•[ ddos, hack, technology ]
On August 8, 2026, Nasha Niva reported that a DDoS attack against its website began at approximately 10:00 a.m. and was still in progress at its 11:24 a.m. report. The incident coincided with the New Belarus conference in Warsaw and the anniversary of Belarus's disputed 2020 election. Other exiled Belarusian outlets also reported DDoS activity. A hacktivist operator is inferred from the political timing and targeting, but neither the attacker nor a government connection was verified.
Zerkalo (Зеркало / Zerkalo.io)
August 8, 2026
•[ ddos, hack, technology ]
Zerkalo reported that its website worked intermittently on the morning of August 8, 2026, during DDoS attacks also reported by Nasha Niva, Pozirk and Reform.news. Zerkalo published its account at 12:05 p.m., but did not give a precise start or restoration time. The campaign coincided with the opening of the New Belarus conference in Warsaw; no operator or government sponsor was identified. Hacktivist is an inference from political timing and target selection.
Primorske novice
August 8, 2026
•[ ddos, hack ]
Primorske novice reported coordinated, multiwave traffic-flooding attacks against its news website beginning on August 8. Some readers could not load pages and online editorial production was affected. The publisher said traffic filtering restored normal service by August 10 and found no intrusion or theft of newsroom or subscriber data. A concurrent attack also affected Necenzurirano. Sabotage is inferred from the effect on news distribution and the outlets' public-information role; the operator and political motive remain unverified.
Necenzurirano.si
August 8, 2026
•[ hack, ddos, technology ]
Necenzurirano.si documented a DDoS campaign beginning August 8 at about 18:30, with successive waves through August 12. Its readers encountered blocked access and HTTP 503 errors. The publisher identified malicious traffic from compromised devices in approximately 40 countries and concluded that the apparent objective was to interfere with publication and readership; it could not identify the person who ordered the attack. Sabotage is a target-and-effect inference, not proof of the sponsor's identity, and no data theft was established.
Wildberries (RWB)
August 10, 2026
•[ ddos, retail, financial ]
Cyber Corps conducted a DDoS campaign against Wildberries on 10-11 August 2026 that disrupted the marketplace's main remote customer-service channel and partially destabilized payment infrastructure, with users reporting inability to complete financial transactions. Ukraine's Defence Intelligence said the operation was intended to reinforce the effects of Ukrainian strikes against Wildberries logistics facilities. Wildberries later confirmed DDoS attacks against its Seller Balance systems; some subsequent seller-withdrawal delays resulted from defensive controls activated in response to the attacks.
Zakład Ubezpieczeń Społecznych (ZUS)
August 10, 2026
•[ hack, ddos, government ]
On August 10, 2026, a volumetric DDoS attack overwhelmed Poland's Social Insurance Institution web services, disrupting the website, mobile app and PUE/eZUS portal. Polish reporting places service problems shortly after 09:00, with restoration around 13:00. ZUS confirmed customers' personal information remained safe. No actor claimed the attack and no financial demand was reported. Sabotage is inferred from the targeting of public benefits-service availability, not from verified political sponsorship.
Threema GmbH (Threema hosted messaging service)
August 11, 2026
•[ ddos, technology ]
A sustained DDoS campaign targeted Threema and its colocation provider Nine on August 11-12, 2026. The hosted messaging service was unavailable from 19:30 to 23:30 CEST on August 11, followed by intermittent failures on August 12 until 12:23 CEST when normal service resumed. The operator changed traffic patterns as Threema adapted its defenses. OnPrem deployments continued functioning; no intrusion into messaging content or data theft was reported. The attacker and motive remain unidentified.
Nine Internet Solutions AG
August 11, 2026
•[ ddos, technology ]
Zurich hosting provider Nine Internet Solutions was hit by a 500-600 Gbit/s UDP-amplification DDoS on Aug. 11-13, 2026, after a customer was targeted; waves knocked its Deploio apps, website, Cockpit portal and ticketing offline. Nine says no systems were breached.
Undisclosed organization
August 11, 2026
•[ ddos, technology ]
An unnamed customer of Swiss hosting provider Nine was the initial target of a large UDP-amplification DDoS on its Nine-provided internet connection on Aug. 11, 2026; the first wave took about 90 minutes of manual mitigation before the attack spread to Nine's network.
Bluesky
August 16, 2026
•[ hack, ddos, technology ]
On August 16, 2026, Bluesky users encountered service disruptions affecting website and app access, including login and feed loading, during a DDoS campaign lasting approximately 24 hours. Bluesky confirmed the attack on August 17 and implemented additional defenses. The pro-Iran hacktivist group Islamic Cyber Resistance in Iraq (313 Team) claimed responsibility but Bluesky did not independently attribute the incident. The event is distinct from a separate April 2026 DDoS campaign against Bluesky.
Norwegian Digitalisation Agency (Digdir)
August 24, 2026
•[ ddos, government, technology ]
DDoS waves targeted Digdir's ID-porten from August 24 to August 26, 2026, intermittently disrupting shared digital services. Digdir says services were mostly available during the campaign; the attack window is not continuous downtime. Server Killers claimed responsibility, without public official attribution. No personal-data loss was indicated. Some restrictions on foreign logins persisted after the attack ended.
National Directorate of Cyber Security (DNSC)
September 8, 2026
•[ ddos, government, technology ]
Attackers launched approximately 2.8 million access requests against dnsc.ro at around 17:00 on 8 September 2026. About 50,000 requests passed DNSC's technical filters and overloaded the website, causing an interruption lasting less than 30 minutes. DNSC director Dan Cmpean said the attackers sought reputational impact by demonstrating vulnerability and undermining public and partner confidence. The specific group and its country of origin were not attributed.
Bulkhead
September 13, 2026
•[ ddos, technology ]
Bulkhead, a Derby, UK game studio, saw its tactical shooter WARDOGS hit by a DDoS attack just before its Sept 10, 2026 Steam Early Access launch, one of several issues that plagued the game. Attacker, duration and specific impact were not reported.
MEO
September 14, 2026
•[ ddos, technology ]
Portuguese telecom operator MEO's international network was congested and degraded by a DDoS attack on Sept 14-15, 2026, leaving some customers unable to reach websites. MEO said no systems were breached nor data accessed and reported it to Portugal's CNCS.
DOLYA & CO. LTD (Dolya Communication System)
September 15, 2026
•[ hack, ddos, technology ]
Pro-Russian hacktivist PalachPro claimed a large DDoS attack and other disruptive actions against Ukrainian systems integrator DOLYA & CO. LTD, a supplier of professional communications systems to Ukrainian defense and security agencies. The claimed effects included blocked servers and file management, loss of access to the website and internal document workflow, inability to add new orders, and temporary loss of email, file exchange and Sonata messenger access. The attack had been publicly claimed by 15 September 2026, but its exact onset, duration and effects have not been independently confirmed.
Direct Communications Cedar Valley
September 17, 2026
•[ hack, ddos, technology ]
A DDoS attack that began Sept 17, 2026 on Direct Communications Cedar Valley, an Eagle Mountain, Utah ISP, caused slow speeds and full internet outages; its phone and billing systems were still down Sept 21. Eagle Mountain closed City Hall and the library. No actor named.
Blok Radio
September 21, 2026
•[ ddos, hack, technology ]
Blok Radio experienced a traffic-flooding attack on September 21, 2026. SHARE's subsequent monitoring report describes the radio being taken offline twice within eight days, distinguishing this incident from the September 28 disruption. Outage duration and restoration timing were not disclosed. Sabotage is inferred from deliberate obstruction of the radio's online service; the operator, actor type and political affiliation remain unverified.
