Telecom Namibia, the primary telecommunications provider for Namibia, faced a major ransomware attack last year, highlighting the growing trend of cyberattacks on critical infrastructure in Africa. The ransomware-as-a-service (RaaS) group Hunters International was responsible for the breach, which led to customer data being leaked online after the company refused to negotiate or pay a ransom. According to CEO Stanley Shanapinda, the threat was contained, and further attacks were prevented, but sensitive customer information was ultimately exposed on the dark web.
This incident is part of a broader surge in ransomware targeting infrastructure across Africa. Similar attacks include the breach of South Africa’s National Health Laboratory Service in mid-2024, which disrupted healthcare testing for weeks, and the theft of 18GB of data from Kenya’s Urban Roads Authority. Additionally, Nigeria’s Computer Emergency Response Team issued warnings about critical cloud service compromises, underscoring the region’s vulnerability to ransomware threats.
Telecommunications and manufacturing sectors have become prime targets, accounting for a significant portion of successful attacks in the region, according to Positive Technologies. Rapid digital transformation, geopolitical tensions, and insufficient cybersecurity measures are key drivers of these attacks. Cybercriminals are increasingly drawn to sectors like telecoms due to their vast digital networks and valuable user data, which offer opportunities for both financial gain and cyber espionage.
The rise of RaaS platforms has further exacerbated the issue, enabling attackers to target high-value infrastructure with sophisticated tools. These services often use African organizations as testing grounds for new attacks, making critical infrastructure providers lucrative targets. The disruption caused by these attacks can lead to severe societal and economic consequences, as they often impact essential public services.
Experts warn that the gap between rapid digitization and cybersecurity measures will likely expand, increasing Africa’s vulnerability to cyber threats. To mitigate these risks, organizations need to enhance employee and customer cyber awareness, adopt secure digital practices, and implement robust cybersecurity measures. As geopolitical tensions continue to rise, Africa’s critical infrastructure may face even greater threats, especially from state-sponsored actors.