MTN hit by ‘cybersecurity incident’, some customer details compromised

Mobile network operator MTN has fallen prey to a “cybersecurity incident” that resulted in “unauthorised access to personal information” of some of its customers in “certain markets”.

However, MTN said late Thursday that it found no evidence of compromise of any of its critical infrastructure platforms or services.

Cyberattack

“Our core network, billing systems and financial services infrastructure remain secure and fully operational.

“An unknown third party has claimed to have accessed data linked to parts of our systems. At this stage, we do not have any information to suggest that customers’ accounts and wallets have been directly compromised,” MTN said.

ALSO READ: WhatsApp account hacked? This is what you need and must do

Investigations

MTN added that it activated its cybersecurity response processes, including informing the South African Police Service (Saps) and the Hawks of the cyberattack.

“We also informed the relevant country authorities and will continue to update them on an ongoing basis while working closely with them and law enforcement agencies in supporting their investigations.”

Confined to SA?

MTN did not disclose which markets had been affected by the cyberattack. However, it may just be related to its South African operations.

“We are in the process of notifying affected customers in compliance with local legal and regulatory obligations.”

Precautions

MTN has urged customers to remain vigilant and follow regular security measures.

“To mitigate any fraudulent consequences, a fraud alert can be placed on an individual’s credit report at any of the major credit bureaus. Keep MTN, MoMo and banking apps and devices updated.

“Use strong, unique passwords for accounts and change them regularly. Be cautious of unexpected messages and do not click on suspicious links,” MTN said.

MTN has also urged customers not to disclose information, such as passwords, PINs and OTPs, when asked to do so by phone, text message, or email.

“Where multifactor authentication is available, it should be activated,” the mobile network operator said.

ALSO READ: Pam Golding hacked: Real estate giant investigating data leak