From large-scale phishing attacks to data leaks caused by outdated digital infrastructure, the threat landscape in several African countries intensified significantly, with millions of online accounts compromised and a sharp rise in cybersecurity breaches.
- African countries experienced a notable rise in cybersecurity breaches in January 2025, compromising millions of online accounts.
- Common attack methods include phishing, exploiting software weaknesses, weak password exploitation, and insider threats.
- Countries like South Sudan, South Africa, Nigeria, Namibia, and Morocco were significantly affected.
In January 2025, several African countries experienced a significant number of cybersecurity breaches, with millions of online accounts compromised across the continent.
The number of leaked accounts saw a dramatic decline in Q1, 2025 following the significant rise in breaches observed in 2024, especially during Q3 and Q4.
This sharp drop in exposed accounts marks a notable contrast to the previous year, which witnessed record levels of compromised data.
According to an analysis by Surfshark, the latest data shows a 93% drop in leaked accounts—from 973.7 million to 68.3 million—in Q1 2025.
Luís Costa, Research Lead at Surfshark, highlighted this significant shift in the threat landscape, emphasizing the decreased volume of breaches in the first quarter of 2025.
Costa further noted that while the number of vulnerable accounts dropped in Q1 2025, cyberthreats continue to evolve.
He stressed the importance of strong security practices, updating passwords, enabling two-factor authentication (2FA), and staying informed about potential risks to protect data.
Globally, the United States, Russia, India, Germany, and Spain were the countries most affected by breaches during this period (Surfshark, 2025).
A data breach occurs when unauthorized individuals gain access to confidential information stored on a computer system or network.
Common methods of attack include phishing, where users are tricked into revealing login credentials through fake emails or websites; exploiting unpatched software vulnerabilities; using stolen or weak passwords through brute-force or credential stuffing attacks; and insider threats, where someone with internal access leaks or steals information.
African countries are particularly vulnerable to data breaches for several interconnected reasons.
Small and medium enterprises, as well as public institutions, frequently lack up-to-date software, adequate encryption standards, and trained IT personnel capable of detecting and preventing cyber intrusions.
These gaps leave African nations increasingly exposed to the evolving threat of cyberattacks, underscoring the need for robust cybersecurity practices and infrastructure to safeguard digital progress.
How African nations performed
Even though African nations recorded significant cyberattacks, none featured in the top 10 countries with the highest data breaches. This highlights that while the continent faces growing digital threats, the overall scale of breaches may still be lower compared to other regions.
According to the analysis by Surfshark, the table below highlights the top 10 African nations with the most data breaches as of January 2025.
| Rank | Country | Breached Accounts |
|---|---|---|
| 1 | South Sudan | 733,250 |
| 2 | South Africa | 205,915 |
| 3 | Nigeria | 119,433 |
| 4 | Namibia | 68,827 |
| 5 | Morocco | 47,411 |
| 6 | Egypt | 43,865 |
| 7 | Ghana | 34,175 |
| 8 | Algeria | 25,411 |
| 9 | Kenya | 19,386 |
| 10 | Senegal | 16,721 |
South Sudan saw the highest number of compromised accounts in January 2025, with over 730,000 breaches. The country’s rapid digital growth in mobile banking and communication services, coupled with limited cybersecurity infrastructure, made it a prime target for cybercriminals, exposing sensitive financial and personal data.
South Africa experienced more than 200,000 compromised accounts, impacted by phishing, ransomware, and data leaks. Despite advancements in cybersecurity regulations, many businesses and public institutions fall short of best practices, leaving the country vulnerable to breaches, particularly in digital finance.
Nigeria had nearly 120,000 compromised accounts due to vulnerabilities in sectors like banking and e-commerce. With rising cybercrimes, there is an urgent need for improved cybersecurity infrastructure and awareness.
Namibia, with over 68,000 compromised accounts, faced breaches linked to outdated cybersecurity practices. As the country expands its digital services, strengthening cybersecurity will be crucial to protecting its growing digital economy.
Morocco, a digital leader in North Africa, had over 47,000 compromised accounts due to phishing and fraud. While regulations are in place, enforcement gaps highlight the need for enhanced cybersecurity education and investment in secure technologies.
