MTN Group, the largest mobile network operator in Africa, has revealed it was targeted in a cyberattack that exposed some customer data. Despite the breach, the company has emphasized that its primary infrastructure—including its core network, billing systems, and financial services platforms—remains secure and unaffected.
In a statement published on its website, MTN explained that an unauthorized entity gained limited access to its systems. However, there is currently no evidence suggesting that customer accounts or mobile wallets were directly compromised.
“There has been no compromise of our critical infrastructure or core services,” the company reassured, noting that its operations continue without disruption.
The breach is under active investigation, and MTN has reported the incident to South Africa’s law enforcement agencies, including the Hawks—a specialized crime investigation unit. Authorities in affected countries have also been notified, and the company is working closely with regulators and investigators to manage the situation.
MTN, which serves around 280 million users across 19 countries, has started contacting potentially affected customers in line with local data protection and privacy laws. The telecom giant is also advising users to take precautions to protect their personal information.
Among its recommendations, MTN urged customers to:
- Place fraud alerts on credit files
- Update mobile applications regularly
- Use strong, unique passwords
- Enable multi-factor authentication where possible
- Avoid clicking suspicious links or sharing sensitive details like passwords or PINs via phone or email
The company reiterated its commitment to transparency and said it will continue to provide updates as the investigation unfolds.
This incident highlights the growing cybersecurity threats faced by telecom operators worldwide, especially those with vast customer bases and digital platforms. While MTN’s swift response has helped contain the breach, it serves as a reminder of the importance of robust cyber defenses and user awareness.