MTN Confirms Cybersecurity Breach, Warns Customers Against Sharing PINs, Passwords Via Calls, SMS

By Emmanuel Kwada

MTN Group, Africa’s leading mobile network operator, has confirmed a cybersecurity breach that compromised the personal data of some customers across select markets. The telecom giant, which serves over 280 million subscribers in 19 countries, disclosed the incident in a statement released on Thursday, sparking concerns amid a rising wave of cyber threats targeting the continent’s telecom and financial sectors.

Despite the breach, MTN reassured stakeholders that its critical infrastructure—including billing systems, financial platforms, and core network services—remains secure and fully operational.

“There is no evidence of compromise to any of our critical infrastructure, core MTN platforms, or services,” the company stated, emphasizing that customer transactions and services have not been disrupted.

There is no evidence of compromise to any of our critical infrastructure, core MTN platforms, or services

The breach came to light after an unidentified third party claimed to have infiltrated portions of MTN’s systems. While the full scope of the incident is still under investigation, the company swiftly launched a response, notifying the South African Police Service and the Hawks, a specialized crime-fighting unit, as well as law enforcement agencies in other affected regions.

“We have informed the relevant country authorities and will continue to update them on an ongoing basis while working closely with them to support their investigations,” MTN said.

Though details about the number of affected customers and the nature of the exposed data remain undisclosed, MTN has begun contacting those impacted to comply with local regulations and address potential risks. The company stressed that it is taking all necessary steps to contain the breach and prevent further damage.

We have informed the relevant country authorities and will continue to update them on an ongoing basis while working closely with them to support their investigations

In a proactive move, MTN issued a public advisory urging customers to safeguard their personal information. “We urge our customers not to share sensitive information such as passwords, PINs, or one-time passwords (OTPs) over phone calls, SMS, or emails,” the statement read.

The company also recommended enabling multi-factor authentication where available and advised customers to place fraud alerts on credit reports, update software regularly, use strong passwords, and avoid clicking on suspicious links.

The incident underscores the growing vulnerability of Africa’s digital infrastructure as cybercriminals increasingly target telecom giants and financial institutions. MTN, a cornerstone of connectivity across the continent, vowed to strengthen its defenses and collaborate with authorities to resolve the matter swiftly.

We urge our customers not to share sensitive information such as passwords, PINs, or one-time passwords (OTPs) over phone calls, SMS, or emails

As the investigation unfolds, customers are left on high alert, with MTN’s warning serving as a stark reminder of the importance of vigilance in an era of escalating cyber threats.