Angola's Biggest Carrier Picked the Worst Possible Day to Get Hacked- 322

August 7, 2026

At 2:20 in the morning on July 28, hackers hit Unitel, Angola's dominant mobile carrier, in what the company would later call a "deliberate and malicious cyberattack on its technological infrastructure." A few hours later, the same company began trading on the Angola BODIVA stock exchange, the culmination of a government auction that had sold off 7.5 million shares — a 15 percent stake in the state-linked operator — for more than 300 billion kwanzas, roughly $320 million. Unitel's stock rose almost 25 percent that first day of trading. It fell nearly 13 percent the next, once the scale of the outage the company was still fighting to contain became clear.

The practical damage stretched well beyond a bad trading week. Unitel restored 2G and 3G mobile service on July 30 and SMS the following day, but as of this reporting its 4G and 5G networks, along with an unspecified set of digital services, were still experiencing problems. For a country where mobile networking effectively is the digital economy, the most consequential casualty wasn't voice or data at all — it was Multicaixa Express, the mobile payment service that accounted for 62 percent of all financial transactions carried over Angolan networks in 2025. When that service went down, business owners in the capital, Luanda, found themselves reverting to cash by August 4, more than a week after the initial intrusion. Unitel holds an estimated 66 to 76 percent of Angola's mobile market, which cuts two ways: the company faces little competitive pressure that would accelerate its own recovery timeline, but that same dominance means its outage doesn't get absorbed by customers quietly switching providers — it becomes, functionally, a national disruption with no ready alternative.

Unitel is not the first African telecom operator to be hit this hard, and the pattern behind these incidents is becoming difficult to treat as coincidental. In April 2025, MTN Group — which operates across nearly twenty markets spanning Africa and the Middle East — suffered a breach that potentially exposed data belonging to more than 200 million customers. Telecom Namibia was compromised in late 2024, with customer information leaked online in what investigators characterized as an apparent ransom scheme. Across all three incidents, the underlying vulnerability isn't really technical sophistication on the attackers' part so much as an infrastructure model built for reach rather than resilience: African telecom operators carry an outsized share of the continent's digital economy on mobile networks that were never architected with the kind of network segmentation that would contain a breach to one part of the business.

Kevin Cardwell, chief information officer at the digital-services firm Cybastion — which has signed a memorandum of understanding to accelerate Angola's digitalization and cybersecurity posture — argues that tight budgets across most African markets make a different starting assumption necessary: treat compromise as inevitable, and design specifically to limit how far any single breach can spread. "If you do take that hit," he said, "you can isolate that damage, and the attackers only take out, maybe, that segment" — a defense posture built around containment rather than prevention, precisely because prevention alone hasn't been holding. Eric Howard, a malware researcher at ESET, points to the same structural gap from a different angle: separating a carrier's upstream infrastructure between distinct services could, in principle, let some functions stay online even while others are compromised, but he cautions that deeper issues — regional routing dependencies, authentication bottlenecks, or backend services shared across supposedly separate functions — can still produce the kind of cascading disruption that hit Unitel's 4G, 5G, and Multicaixa Express simultaneously. The Unitel case adds a specific and uncomfortable data point to that broader African pattern: even a state-linked telecom carrier taking its first public shares to market, under maximum outside scrutiny, wasn't spared — and the disruption that followed suggests the segmentation gap Cardwell and Howard describe isn't a future risk so much as the exact mechanism that just played out in Luanda.