08 Jan Africa sees cyber attacks on governments increase

Cyberattacks across Africa are increasing at an alarming pace, with recent incidents revealing just how exposed critical services and national infrastructure have become.

Cyberattacks in Africa rose by 37 per cent in 2024 compared with the previous year, while global attacks increased by around 30 per cent, according to Check Point Software Technologies. As one of Africa’s most connected countries, South Africa has become a major target for cybercriminals.

“The attack surface has increased, while the attacks by cybercriminals have grown in frequency, strength and severity,” Adius Ncube, a senior adviser at Oliver Wyman, wrote for the Daily Maverick.

Cybercriminals are increasingly targeting critical infrastructure, including healthcare systems, utilities and ports.

In 2024, South African organisations and government agencies experienced an average of 1,450 cyberattacks per week.

Among the most serious incidents, attacks shut down blood testing at the National Health Laboratory Service, breached the Companies and Intellectual Property Commission and compromised the Government Employees Pension Fund, Africa’s largest pension fund, valued at more than USD $85 billion.

Even the State Security Agency was hacked just days before the 2023 BRICS economic summit.

Addressing Parliament, Minister in the Presidency Khumbudzo Ntshavheni acknowledged the problem, describing an ‘exponential increase’ in cyberattacks on government institutions and warning of their potential economic impact.

“In our efforts to strengthen cybersecurity, we are hard at work building and strengthening our capabilities and capacity to proactively combat emerging cyberthreats and potential cyberattacks on our communications environment,” she said, adding that the government would accelerate implementation of its National Cyber Security Framework.

Despite these efforts, analysts argue that cybersecurity still struggles to compete with other national priorities.

Writing in 2024, Joe Devanny and Russell Buchan said progress had been made, including the creation of a military Cyber Command, but warned that more sustained focus was needed.

Ncube echoed those concerns as he wrote: “While South Africa has yet to experience a truly devastating attack, it’s certainly not immune to one.

“Experts agree that in the case of South Africa, as with most countries, it is only a matter of time before the country experiences a highly disruptive attack.”

He also warned that the weakest link often lies with individual users, noting that many attacks begin with deceptive emails or messages. “While an integrated approach won’t stop every attack, it will prevent many more than allowing organisations in charge of critical infrastructure to each take care of their own cybersecurity needs,” he wrote. “Moreover, such an approach can also help mitigate the impact of any such attack.”

Now, similar concerns are being raised elsewhere on the continent.

In Ghana, stakeholders in the financial sector are calling for urgent action to prevent the country’s fast-growing digital economy from becoming a target.

Cybersecurity analyst Amenyo Tettey Normanyo has urged the development of a 2026–2030 Cybersecurity Transformation Plan to protect banking, fintech and mobile money platforms.

He said the plan should provide a clear strategic vision, and while the Bank of Ghana has issued guidelines to strengthen cybersecurity, Normanyo warned they fall short of a long-term effective strategy.

“Financial stability, investor credibility, and public trust depend on proactive action. Ghana cannot afford to celebrate digital transformation while neglecting the security foundations that sustain it,” he said.