Angola’s Largest Telco Breached Hours Before IPO
Unitel, Angola’s dominant mobile operator, is still reeling from a devastating cyberattack that struck on July 28, just as the company was preparing to go public. The attack caused widespread outages across Unitel’s networks, crippling services including mobile data and SMS. While some services have since been restored, others remain offline, causing significant disruption to customers and businesses.
The attack is particularly damaging given its timing: it occurred on the same day that 15% of Unitel was sold to investors in a public offering, which raised over $320 million for the government. The stock market listing was seen as a major milestone for Angola’s telecom sector, but the cyberattack has already sent shockwaves through the industry.
The attack itself is believed to have been a deliberate and malicious assault on Unitel’s technological infrastructure, according to a statement from the company. The impact has been significant: customers in Luanda, the capital of Angola, were forced to rely on cash transactions due to disruptions to popular financial services such as Multicaixa Express.
Unitel commands an estimated 66-76% market share in Angola, making it one of the largest mobile operators in Africa. However, despite its dominant position, the company still faces intense competition from rival operators and must contend with a heavily reliant customer base that relies on mobile networking for digital services. The restoration of services is therefore a top priority.
Recovery efforts are underway, but experts warn that major telecom breaches can take anywhere from 24 hours to several days to resolve. In Africa, where budgets are often tight, organizations must be prepared to limit the damage through reducing their attack surface. Kevin Cardwell, chief information officer at Cybastion, a digital services and cybersecurity provider, emphasizes the importance of identifying high-risk areas in networks and mitigating risk.
“The countries need to identify where their high-risk areas are at, and then mitigate the risk,” he says. “If you do take that hit…you can isolate that damage, and the attackers only take out maybe that segment.” Cardwell notes that Africa’s reliance on mobile infrastructure exposes a different set of cybersecurity vulnerabilities than fixed-line infrastructure, highlighting the need for tailored security models.
The Unitel attack serves as a stark reminder of the dangers of insufficient network segmentation in critical infrastructure. As companies like Unitel continue to navigate the complex world of cybersecurity, they must prioritize robust defenses and incident response plans to mitigate the impact of future attacks. For consumers and businesses alike, this means being prepared for disruptions and having contingency plans in place.
In light of this attack, customers and operators would do well to take a closer look at their own networks and identify areas where risk can be reduced. By doing so, they can limit the damage caused by cyberattacks and prevent future disruptions. As Cardwell notes, “If you don’t prepare for it, you’re going to get hit.”
Source: Dark Reading — 2026-08-05