PST
Norway's Police Security Service; confirmed Norway as a Salt Typhoon telecoms victim, April 2026.
Last refreshed: 30 April 2026 · Appears in 1 active topic
Why did Norway wait for a sixteen-agency advisory to admit Salt Typhoon had hit it?
Timeline for PST
Disclosed Norway as a Salt Typhoon victim using the 16-agency advisory publication as the occasion
Cybersecurity: Threats and Defences: Norway joins the Salt Typhoon victim list- Has Norway confirmed it was hacked by Salt Typhoon?
- Yes. Norway's PST used the sixteen-agency advisory publication on 23 April 2026 to confirm that Norway is a Salt Typhoon victim, taking the confirmed public country count past nine. PST stated that Norwegian telecoms infrastructure was among the compromised systems.Source: PST / 16-agency advisory
- What does Norway's PST do?
- PST (Politiets sikkerhetstjeneste) is Norway's domestic security service responsible for counter-terrorism, counter-espionage, and protecting Norwegian democratic institutions. It operates under the Ministry of Justice and the Police and publishes an annual threat assessment.Source: PST
- Why does the Salt Typhoon hack of Norway matter for NATO?
- Norway hosts key NATO communications infrastructure. Salt Typhoon's penetration of Norwegian telecoms carriers raises the possibility that alliance command-and-control traffic was exposed to Chinese signals intelligence collection.Source: PST / NATO
Background
The Politiets sikkerhetstjeneste (PST) is Norway's domestic intelligence and security service, operating within the Norwegian National Police under the Ministry of Justice and the Police. Founded in 1937 (as the State Police, reorganised as PST in 2002), it is responsible for counter-terrorism, counter-espionage, and protecting Norwegian constitutional institutions. Unlike Norway's foreign intelligence service NSM (the National Security Authority), PST has a domestic REMIT but routinely cooperates with the NCSC, AIVD, GCHQ, and other Five Eyes-adjacent partners on state-sponsored threat tracking.
PST publishes an annual threat assessment and is Norway's lead agency for disclosing confirmed state-sponsored targeting of Norwegian entities. Its disclosures carry legal weight in Norwegian security proceedings and are treated as credible by allied services.
PST used the publication of the sixteen-agency joint advisory on 23 April 2026 to publicly confirm that Norway is a Salt Typhoon victim, taking the confirmed public country count past nine. Salt Typhoon is the US government's designation for the China-linked cluster that penetrated telecoms carriers globally to intercept lawful-intercept wiretap metadata; PST's disclosure confirms that Norwegian telecoms infrastructure carrying protected communications was among the compromised systems. The PST disclosure is the first Nordic government confirmation of Salt Typhoon victim status, and is significant because Norway's telecoms carry NATO command-and-control traffic as a member state.
