Angola’s Biggest Phone Network Is Back After 23 Days Offline
ANGOLA · BUSINESS
Key Facts
—Back online: Unitel said on Thursday 20 August that it had restored voice, messaging, data, internet and third-party services across the whole of Angola. One minor service, the call-waiting tone, is still to be relaunched.
—How long: The attack struck on 28 July 2026, so the outage ran twenty-three days.
—What it was: The operator describes a deliberate cyberattack of extraordinary magnitude and sophistication aimed at its technological infrastructure.
—The data question: An external forensic investigation has not identified any compromise or improper access to customer or partner data to date.
—Compensation: Customers will be credited automatically and notified by text message or email. No value has been disclosed.
—The timing: The attack landed on the eve of Unitel’s stock market debut, the flagship of Angola’s privatisation programme. The listing went ahead.
—Still unknown: No perpetrator has been named, no ransom claim reported and no loss figure published.
Unitel says it has restored almost every service twenty-three days after the Unitel cyberattack of 28 July knocked out Angola’s largest mobile network. The operator says no customer data was compromised, and has not said who did it.

What Unitel has confirmed
The company announced on Thursday 20 August that it had completed the restoration of mobile voice, messaging, data and internet services, along with third-party services that run over its network, across the whole country. It described the milestone as coming more than three weeks after the total blackout.
One service remains down. The call-waiting tone will be relaunched on a date still to be announced.
Unitel characterises the incident as a deliberate cyberattack of extraordinary magnitude and sophistication, directed at its technological infrastructure. It has said nothing about who was responsible.
What the forensic finding does and does not say
A forensic investigation conducted with independent external specialists has, in the company’s words, not identified to date any compromise, improper access or improper sharing of the personal data of customers and partners. The qualifier is doing work.
“To date” is the standard formulation used while an investigation continues, and the external specialists have not been named. Customers should read it as an interim finding rather than an all-clear.
Unitel will credit customers automatically, with notification by text message or email, as recognition of their patience. No value has been attached to that gesture, so its cost to the company is unknown.
Why the Unitel cyberattack was a national event
This was not a telecoms inconvenience. Contemporaneous reporting from late July described the intrusion being detected at 2:20 am on 28 July and affecting somewhere around 21 million customers.
Because Angolan retail payments, banking transactions, tax payments and ride-hailing all run over mobile connectivity, the outage did not stop at the phone network. It stopped most electronic commerce.
The date made it worse. The attack landed on the eve of Unitel’s stock market debut, the centrepiece of Angola’s programme to sell down state assets and reduce its dependence on oil revenue.
A listing designed to demonstrate that Angolan state companies can be run to market standards instead demonstrated how much of the economy sits on one network.
What a three-week outage costs
Nobody has published a number, and that absence is itself informative. Angolan reporting in late July noted that the scale of the damage had not been calculated, and a month later it still has not been.
The categories are easy enough to list. Lost airtime and data revenue at Unitel, lost transaction fees at the banks, lost turnover at every merchant who could not take a card, and the cost of the forensic and rebuild work.
Harder to quantify is the reputational component, which lands on the government as much as on the company. Angola spent two years telling international investors that its state enterprises were ready for public markets.
The counter-argument is that the network came back in twenty-three days, with no evidence so far of a data breach. That is not a trivial recovery from an intrusion of this scale.
The lesson that travels
Single points of failure are not unique to Angola, but the concentration is unusually stark. One operator, one infrastructure, one intrusion, and a national payments system stops for three weeks.
Similar concentration exists across much of the continent, where mobile money has substituted for a branch banking network that was never built. That brings an efficiency gain and a matching fragility.
What is still missing here is any accounting of the damage. No loss figure has been published, no perpetrator identified, and no regulator has said publicly what it intends to require of the operator.
For investors in the newly listed shares, that is the item still outstanding. The recovery is confirmed; its cost is not.
Frequently Asked Questions
When was Unitel’s network restored?
The company announced full restoration on Thursday 20 August 2026, twenty-three days after the attack on 28 July. Only the call-waiting tone service remains to be relaunched.
Was customer data stolen?
Unitel says an external forensic investigation has not identified any compromise or improper access to customer or partner data to date. The investigation is continuing and the specialists have not been named.
Who carried out the attack?
No perpetrator has been named and no ransom claim has been reported. Unitel describes it only as a deliberate cyberattack of extraordinary magnitude and sophistication.
Will customers be compensated?
Unitel says it will credit customers automatically and notify them by text message or email. No value for the credits has been disclosed.
Connected Coverage
We covered the outage as it hit: Angola’s new shareholders watched Unitel go dark within days of the listing.
The macro picture is improving, with inflation nearing single digits for the first time in decades even as the fuel import bill jumped 48% to US$1.7 billion. More in the Southern Africa hub and Africa: The New Scramble.
This article was produced by The Rio Times’ automated newsroom system. How we use AI · Report an error
LatAm Markets: Live Signals → — real-time movers, turnover leaders and FX across Latin America.
Read More from The Rio Times