Incident report · Nordvik AS
Incident #7 — Betalfil
- Aware
- 03:12 — monitoring, not a customer
- Answered
- 03:16 — Jonas Berg, 4 minutes after opening
- Service impact
- None outside — resolved before the 06:00 bank window
1 · How we became aware
Betalfil’s promise “Hourly payment file” expects a ping every hour at :00 with 10 minutes of grace. The 03:00 ping did not arrive. At 03:12 the grace expired and the incident opened automatically. No person reported it; detection was the missed ping itself. The last successful ping was 02:00:04.
2 · Everyone contacted, and what happened to each attempt
| Time | Person | Channel | Outcome |
|---|---|---|---|
| 03:12:09 | Kari Moen | SMS | Delivered. No answer. |
| 03:14:11 | Jonas Berg | SMS | Delivered. Answered 03:16 — pressed “I have it”. |
| — | Eva Strand | None | Not reached — the ladder stopped when Jonas Berg answered. |
3 · Why it happened, as written by the responder
“The bank rotated the SFTP host key at 02:47 without notice. Our transfer job refused the new key, as it should. We pinned the new key at 05:52 and the file went through at 05:58.”
4 · NIS2 filings — each is a page of its own; the sent copy is kept verbatim
| Obligation | Due | Done | State |
|---|---|---|---|
| Early warning (24 h) | 15 Sep 03:12 | 14 Sep 09:02 | Met — drafted Jonas Berg, approved Eva Strand, sent 09:02:14 by email, CTO on copy |
| Incident notification (72 h) | 17 Sep 03:12 | 14 Sep 09:31 | Met — drafted Jonas Berg, approved Eva Strand, sent 09:31:02 by email, CTO on copy |
| Intermediate report (on request) | On request | None | Not owed |
| Final report (1 month after the first notice was sent) | 14 Oct | None | Not yet due |
5 · Evidence
- ping log
- 02:00:04 → 05:58:12
- delivery receipts
- 2 of 2 · provider ids on file
- this document
- https://www.amondinops.com/en/dok/demo — this address always serves this same document