CSIDB logo
Incident

Folketinget

Incident posture

Attack window
Dec 2015
Location
Denmark
Status
Historical
CIA posture
Available to members
Updated
2026-01-13 00:15

Linked entities

Victim
Folketinget
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Dec 2015
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

The Danish Parliament website was rendered inaccessible following a distributed denial-of-service (DDoS) attack that overwhelmed the system, causing prolonged downtime starting in the morning local time. The government acknowledged the disruption but could not identify the responsible actors or estimate a restoration timeline. This incident reflects a broader pattern of cyberattacks targeting governmental digital infrastructure globally, including notable breaches affecting U.S., German, and U.K. parliamentary systems, though specific impacts varied across these incidents.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

On December 11, 2015, the Danish Parliament's official website, folketinget.dk, became inaccessible following a distributed denial-of-service (DDoS) attack. Parliamentary press spokesman Finn Tørngren Sorensen confirmed the incident, stating the attack commenced at 10:00 a.m. local time. The sustained barrage of malicious traffic overwhelmed the site’s infrastructure, forcing it offline. Despite immediate awareness of the attack, parliamentary officials could not restore functionality during the initial hours of the disruption. Sorensen publicly addressed the incident through Danish news outlet Avinsen.dk, acknowledging the attack’s operational impact but providing no technical details about its scale or methodology. The website remained nonfunctional for an unspecified duration after the initial outage, disrupting public access to parliamentary information and services. No ancillary systems or government networks beyond the primary website were reported as compromised.

Danish authorities did not identify the perpetrators or attribute motives for the attack during the incident’s immediate aftermath. Sorensen explicitly stated the government lacked knowledge regarding the responsible individual or group. No ransomware demands, hacktivist claims, or geopolitical statements accompanied the attack. The incident occurred amid a global pattern of cyberattacks targeting government entities, including contemporaneous breaches affecting U.S., German, and U.K. parliamentary systems. Restoration timelines for folketinget.dk were undisclosed, leaving public uncertainty about service continuity. The attack exclusively disrupted website availability, with no reported data exfiltration, defacement, or secondary malware infections.

Sources

Sources available to members: 1 source.

CSIDB