Ralph Mupita, Group President and CEO of MTN Group
Telecommunications company, MTN Group, has confirmed a cybersecurity breach that led to unauthorised access to customer data in some of the countries where it operates.
In a statement issued on Thursday, April 24, 2025, the company said an unknown third party had gained access to parts of its systems but stressed that its core network, billing systems, and mobile money platforms remained uncompromised.
“An unknown third party has claimed to have accessed data linked to parts of our systems,” MTN said.
“At this stage, we do not have any information to suggest that customers’ accounts and wallets have been directly compromised,” it added.
The group has not disclosed which countries were affected.
MTN said it responded immediately by activating its cybersecurity protocols and informing law enforcement agencies, including South Africa’s Directorate for Priority Crime Investigation (the Hawks) and the South African Police Service. Authorities in other affected countries have also been notified.
The company said it had begun notifying impacted customers in line with legal and regulatory requirements and had issued advice on steps individuals could take to protect themselves.
“Customers are encouraged to remain vigilant and follow regular security measures,” MTN said, urging users to update their devices and apps, set strong passwords, and avoid sharing sensitive information like PINs and passwords.
The company also warned customers to be cautious of suspicious messages and links and recommended activating multifactor authentication where possible.
MTN said it remained committed to transparency and the protection of customer data.
“We will continue to contain and manage this matter carefully,” the company said.
“MTN remains committed to safeguarding the integrity of our systems and the trust placed in us by our customers and other stakeholders,” it stated.
Despite the breach, MTN emphasised that its critical infrastructure and financial services platforms continue to operate securely and without disruption.