NewsResourcesJanuary 7, 2022Norwegian DPA penalizes Østre Toten municipality

Another public office sanctioned for lack of adequate cybersecurity measures. Pursuant to a cyberattack, personal information in the municipality’s database was leaked and published on dark web. The data was about residents and municipality’s employees. The DPA found shortcomings in the municipality’s cybersecurity posture including weak firewall protection and lack of secure backups.

Find the decision here