Paratus Namibia Holdings Limited

Summary

The listed Namibian telco confirmed a cybersecurity incident involving unauthorized activity detected within its internal IT systems, resulting in operational disruption. The company activated its business continuity response plans, immediately taking affected systems offline to contain the attack while internal technicians and independent international legal, forensic, and cybersecurity experts worked to investigate the breach and restore services on a risk-managed basis. The incident was reported to relevant regulatory authorities, and investigations remain ongoing with commitments to notify stakeholders of material developments. The breach followed a recent ransomware attack on another Namibian telecom provider.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Paratus Namibia Holdings Limited, a telecommunications company listed on the Namibia Securities Exchange, confirmed a cybersecurity incident that affected its internal IT systems. The company disclosed the breach through an official filing to the Namibia Securities Exchange, notifying stakeholders of unauthorized activity detected within its environment. According to the company's statement, the incident disrupted certain information systems, which in turn had an effect on the company's operations. The company did not specify the exact date on which the unauthorized activity was first detected, nor did it identify the specific nature or classification of the cyberattack in its public communications.

In response to the discovery of unauthorized activity, Paratus Namibia stated that its established business continuity response plans and resilient processes were immediately activated. All affected systems were taken offline as a containment measure to prevent further spread of the incident, while allowing internal technical staff to begin investigating the matter. The company emphasized that the decision to isolate systems was part of a structured containment strategy designed to limit the scope of the compromise. By taking systems offline, the company acknowledged that operational disruption would continue until affected services could be safely restored.

Paratus Namibia deployed its internal incident response team to coordinate the investigation and remediation efforts. This internal team worked in collaboration with independent international legal advisors, forensic specialists, and cybersecurity experts brought in from outside the organization. The combined team operated around the clock to investigate the scope and impact of the breach, assess which systems and data may have been affected, and begin the process of bringing affected systems back online. The company indicated that restoration was being carried out on a risk-managed basis, in line with industry best practices, prioritizing systems based on criticality and the results of the ongoing investigation.

The company underscored its commitment to the confidentiality, privacy, and security of the information it holds, stating that it had taken the necessary steps to report the incident to the relevant regulatory authorities. Paratus Namibia did not specify which regulatory bodies had been notified, nor did it provide details on whether any customer or employee data had been accessed, exfiltrated, or otherwise compromised during the incident. At the time of the disclosure, investigations into the incident remained ongoing, and the company stated that it was committed to promptly notifying all relevant stakeholders as material developments arose, in line with its applicable legal obligations.

The cyberattack on Paratus Namibia occurred against the backdrop of another significant cybersecurity incident affecting the Namibian telecommunications sector earlier in 2025. Telecom Namibia was targeted by a ransomware attack attributed to the group known as Hunters International, which resulted in the exfiltration of 626.3GB of data. The stolen data reportedly included sensitive customer records, such as identification documents and physical addresses. While the article drawing this comparison did not state that the same threat actor was responsible for the Paratus Namibia incident, the temporal proximity of the two events highlighted a pattern of cyber threats targeting telecommunications providers in Namibia. Paratus Namibia's public statements did not reference any attribution to a specific threat actor or group, nor did they confirm whether ransomware, data exfiltration, or another form of cyberattack was involved in its own incident. The company indicated that further information would be released as the investigation progressed and as material facts were established.

Sources

Sources available to members: 1 source.