Cyberattack disrupted mobile, internet and payment services across Angola
THE BRIEF
Independent network measurements reviewed by The Record showed a sharp collapse in Unitel traffic while its internet routing announcements remained visible. That pattern suggested disruption inside the operator’s core systems rather than a simple external connectivity cut. Angolan reporting also described point-of-sale payment terminals failing where they depended on Unitel connections. The outage occurred immediately before Unitel’s stock-market debut, but officials did not establish any connection between the timing and the attack. Trading proceeded. Unitel reported more than 20 million subscribers and a dominant national market share, making the incident a public-service and economic disruption rather than only a company IT problem. Attribution and the precise technical cause remained unknown. For affected people, the practical response should follow confirmed notices rather than speculation. Organizations should preserve records, identify responsible owners and communicate clearly about the known scope. Individuals should use official contact channels, review relevant accounts or devices and be cautious of follow-up messages that exploit publicity around the incident.
WHY IT MATTERS
When one telecommunications provider carries most of a country’s mobile traffic, a cyber incident can interrupt far more than calls. Card payments, logistics, emergency communications, remote work and access to online banking can fail together. Small businesses and households may have no practical alternative connection. The event illustrates concentration risk: business-continuity plans that assume the public mobile network will remain available may collapse during a national outage. Operators and public authorities need restoration priorities and communication channels that function independently of the affected network.
WHO SHOULD CARE
Unitel customers, Angolan businesses, banks, payment providers, emergency services and managers responsible for continuity should care. Organizations depending on one mobile operator need alternative communications and payment arrangements because a core-network incident can affect customers who never interact directly with the compromised systems.
WHAT TO DO NOW
- Businesses should maintain a tested backup connection from a different network provider where possible.
- Prepare offline or alternative payment procedures for periods when mobile terminals cannot connect.
- Keep emergency contacts and continuity instructions available without cloud or mobile access.
- Avoid circulating unverified claims about attribution while service restoration is underway.
- After recovery, reconcile delayed transactions and confirm that failed payment attempts were not duplicated.
VERIFICATION NOTE
Verified through Unitel’s public statement and independent RIPE NCC and Cloudflare traffic observations reported by The Record. The service disruption and company response are confirmed. The internal-system explanation is an inference from network behavior, not a disclosed forensic conclusion. No attacker, motive or connection to the company’s market listing was established.