MTN confirms cyber security breach, customers’ data at risk
Agency Report
Africa’s largest mobile operator, MTN Group, has confirmed a cybersecurity breach that resulted in unauthorized access to personal information belonging to customers across certain markets.
The company, which operates in Nigeria and 15 other African and Middle Eastern countries, disclosed the incident in a statement released recently, although it did not specify the exact markets affected.
MTN emphasized that its core network, billing systems, and financial services infrastructure remain secure and fully operational, clarifying that no evidence currently suggests that customer accounts or mobile money (MoMo) wallets have been directly compromised.
“The breach involved unauthorized third-party access to portions of our systems,” MTN stated. “At this stage, we have no information indicating those customers’ accounts and wallets have been breached.”
The company has reported the breach to the South African Police Service (SAPS), the Directorate for Priority Crime Investigation (Hawks), and regulatory agencies across affected countries.
MTN stressed that the privacy and security of its customers remain a top priority. “We are managing this situation with utmost seriousness and will continue to update stakeholders as investigations progress,” the statement said.
The breach at MTN comes amid rising cybersecurity threats targeting the telecommunications and financial services sectors worldwide.
Just last week, SK Telecom, South Korea’s largest mobile operator, revealed that a malware attack allowed threat actors to access sensitive USIM-related data during a weekend cyberattack on April 19, 2025.
The incident underscores the vulnerabilities faced by critical infrastructure providers during periods of reduced staffing.
Dr. Aisha Bello, a cybersecurity analyst at CyberSec Africa, said: “Telecom operators like MTN handle enormous volumes of personal and financial data. Even if core systems are untouched, breaches involving customer information can erode public trust if not managed transparently and swiftly.”
Similarly, Mr. Leonard Eze, an information security consultant based in Lagos, noted: “While MTN’s swift activation of response protocols is commendable, the evolving nature of cyber threats requires continuous investment in proactive cybersecurity measures, including regular penetration testing, system audits, and robust incident response frameworks.”
