Telia Norge Data Breach Exposes Data of Half a Million Customers

A significant data breach at Telia Norge has compromised the personal information of approximately half a million private customers and impacted 3,000 business customers, as well as current and former employees. The breach, initially detected in late November 2025, became public knowledge in February 2026 after a hacker group threatened to release the stolen data on the dark web.

What Happened?

Telia Norge discovered unauthorized access to a portion of its IT environment in late November 2025. Immediate steps were taken to identify and block the intruders, and an investigation was launched to determine the extent of the damage. On February 6, 2026, a criminal hacker group announced its intention to publish a large volume of data extracted from Telia Norge’s systems, but did not attempt to contact the company [Telia Norge].

What Data Was Compromised?

The leaked data includes a range of sensitive information, categorized as follows:

• Private Customers: Approximately 900 current or former customers had their social security numbers exposed. Half a million customers who have TV or broadband services with Telia had their names, addresses, email addresses, telephone numbers, dates of birth, and IP addresses compromised. This includes partner accounts.
• Business Customers: Around 3,000 business customers utilizing Telia’s data communication solutions were affected, with data including addresses, contact details, service information, and LAN IP addresses exposed.
• Employees: Information pertaining to current and former employees, including payslips, employment contracts, and personal files, was obtained through access to a remote login tool.

The hacker group claims to have stolen 2.5 terabytes of data, including communication data that could potentially endanger individuals [NRK].

Impact on Municipalities

The data breach also affected information related to several municipalities, including Bergen municipality. Specifically, invoice information regarding Bergen’s telephone services was among the leaked material, revealing call and message logs to and from municipal telephone numbers [DataGuidance]. Whereas the content of the communications was not leaked, the data reveals who contacted the municipality and when.

Response and Investigation

Telia Norge has mobilized significant resources to address the breach, working closely with authorities, including the police, and the Norwegian Communications Authority (Nkom) [DataGuidance]. Nkom announced an inspection of Telia Norge AS on February 25, 2026, following reports of the extensive data breach. The company is actively contacting affected customers and providing information on its website [NTB].

What Customers Should Do

Telia is advising affected customers to consult the information available on its website for guidance and support.