Cyber Incident Victim: Rwanda Data Center
Date:
Feb 2020
Location:
Rwanda
Summary
Hackers disrupted operations at a Rwandan government data center hosting both public and private servers through a cyber attack, forcing the facility offline for several hours and preventing traffic access. This resulted in widespread outages affecting numerous critical government websites, including those belonging to the presidency and national military.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On February 18, 2020, a cyberattack targeted a Rwandan data center hosting government and private sector servers, forcing the facility offline. The attack blocked the center from receiving network traffic, disrupting operations for several hours. This outage caused the majority of Rwandan government websites to become inaccessible, including high-profile platforms such as the official website of the President of Rwanda and the online presence of the state army. The incident represented a significant disruption to the country’s digital infrastructure, affecting both public institutions and private entities reliant on the data center’s services. No specific technical details regarding the attack vector—such as malware, ransomware, or denial-of-service methods—were disclosed in available reporting. Similarly, the identity and motivation of the attackers remained unconfirmed in source materials.

The disruption lasted for multiple hours, though precise restoration timelines were not documented. The incident’s primary observable impact was the widespread unavailability of critical government digital services, limiting public access to official information and online functions. Private sector systems hosted at the same facility were also affected, though the scope of their operational or financial losses was not quantified. No public statements from Rwandan authorities regarding incident response measures—such as containment procedures, forensic investigations, or recovery efforts—were referenced in the source material. The attack underscored vulnerabilities in centralized data infrastructure serving governmental functions but did not yield verifiable reports of data theft, destruction, or secondary disruptions beyond the immediate service outage.
