On April 24, 2025, MTN Group, one of Africa’s largest telecommunications providers, disclosed a cybersecurity incident involving unauthorized access to customer data in select markets. While the company assures that its core systems remain secure, the breach raises concerns about data privacy and the increasing cyber threats facing telecom operators.
What Happened?
MTN detected the breach on Saturday, April 19, 2025, at approximately 11 PM local time. The incident involved unauthorized access to personal information of some customers in certain markets. An unknown third party claimed to have accessed data linked to parts of MTN's systems. However, MTN emphasized that there is no evidence suggesting that customer accounts or mobile wallets have been directly compromised.
🛡️ MTN’s Response
Upon discovering the breach, MTN promptly activated its cybersecurity response protocols. This included notifying the South African Police Service (SAPS) and the Hawks, as well as relevant authorities in the affected countries. The company is cooperating fully with investigations and is in the process of notifying impacted customers in compliance with local legal and regulatory obligations.
🔐 What Data Was Affected?
MTN has confirmed that the breach resulted in unauthorized access to personal information of some customers. However, the company has not disclosed specific details about the type of data accessed or the number of customers affected. Importantly, MTN stated that its core network, billing systems, and financial services infrastructure remain secure and fully operational.
🌍 Broader Context
This incident highlights the growing cyber threats facing telecommunications providers globally. Just last week, South Korea’s largest mobile operator, SK Telecom, reported a malware infection that allowed threat actors to access sensitive customer information. These incidents underscore the importance of robust cybersecurity measures in the telecom industry.
✅ What Should Customers Do?
MTN advises customers to remain vigilant and adopt best practices in digital security:
- Enable multifactor authentication where available.
- Avoid clicking on suspicious links.
- Regularly update mobile apps and devices.
- Use strong and unique passwords.
- Never disclose personal credentials via email, text, or phone.
Customers are encouraged to monitor their accounts for any unusual activity and report any suspicious incidents to MTN customer support.
📢 Final Thoughts
While MTN has taken swift action to address the breach and secure its systems, the incident serves as a reminder of the persistent cyber threats facing the telecommunications industry. Customers should remain proactive in safeguarding their personal information and stay informed about best practices in digital security.