Lyce · Hybrid Watch

hw_d1bfe7f0dc70c859

Pro-Russian hackers conduct DDoS attacks against Swedish government websites.

On 25 August, the pro-Russian hacktivist group NoName057(16) claimed responsibility for a coordinated cyberattack against Swedish public-sector websites. The group stated that it had taken down the websites of Sweden’s Privacy Protection Authority and the Riksdag, while also claiming an attack against the Swedish Competition Authority. Several Swedish public agencies reported technical problems during the operation. The activity consisted of distributed-denial-of-service attacks intended to overwhelm targeted online services. The attack targeted government institutions of a NATO member rather than private individuals or media outlets. The operation therefore qualifies as a significant cyber incident under your tracker methodology. No physical infrastructure was damaged, but temporary disruption of government-facing digital services was reported. NoName057(16) is a well-known pro-Russian hacktivist group whose operations have repeatedly targeted European states supporting Ukraine.

Occurrence
2026-08-25
Publication
2026-08-25T20:50:48Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
SE
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2026-08-25T20:50:48Z

    On 25 August, the pro-Russian hacktivist group NoName057(16) claimed responsibility for a coordinated cyberattack against Swedish public-sector websites. The group stated that it had taken down the websites of Sweden’s Privacy Protection Authority and the Riksdag, while also claiming an attack against the Swedish Competition Authority. Several Swedish public agencies reported technical problems during the operation. The activity consisted of distributed-denial-of-service attacks intended to overwhelm targeted online services. The attack targeted government institutions of a NATO member rather than private individuals or media outlets. The operation therefore qualifies as a significant cyber incident under your tracker methodology. No physical infrastructure was damaged, but temporary disruption of government-facing digital services was reported. NoName057(16) is a well-known pro-Russian hacktivist group whose operations have repeatedly targeted European states supporting Ukraine.