South African News

South African Airways restores systems within hours following major cyberattack

Se-Anne Rall|Published

South African Airways announced today that it has been impacted by a significant cyber incident that began on Saturday

Image: IOL

SOUTH African Airways (SAA) faced a major cyber incident that disrupted access to its online platforms at the weekend.

The breach affected the airline’s website, mobile application, and several internal systems, prompting immediate action to mitigate the impact on flight operations and customer service.

In a statement shared on Monday, the airline said it activated its comprehensive disaster management and business continuity protocols.

"The effective measures taken by the airline successfully contained the incident, ensuring that core flight operations remained uninterrupted and that crucial customer service channels—including contact centres and sales offices—continued to function normally," said Group CEO Professor John Lamola.

He said SAA management quickly launched an investigation with the assistance of credible, independent digital forensic experts.

Lamola added that in line with its commitment to regulatory compliance and transparency, SAA has undertaken all reasonable and lawful steps as a National Key Point, including formally reporting the incident to the State Security Agency (SSA), South African Police Service (SAPS) for criminal investigation and notifying the Information Regulator of South Africa as a precautionary measure under the Protection of Personal Information Act (POPIA).

He further stated that a preliminary investigation is currently assessing the full extent of the incident and actively working to determine if any data was accessed or exfiltrated.