Cyberattack Cripples South African Weather Service, Disrupting Critical Forecasting

A cyberattack has taken the South African Weather Service (SAWS) offline, disrupting vital forecasting systems relied upon by airlines, farmers, and neighbouring countries.

SAWS confirmed the attack in a statement on social media, revealing that its Information and Communication Technology (ICT) systems suffered a security breach. The organisation’s website and email systems remain inaccessible, forcing it to share weather updates through alternative channels like Facebook and X.

The attack has impacted aviation and marine forecasting services, raising concerns over safety and logistical disruptions. SAWS said its ICT teams are working to restore systems and have reported the breach to law enforcement.

SAWS noted that this was the second attempted attack in as many days, following a failed breach on 25 January.

While no ransomware group has claimed responsibility, South Africa has faced a surge in cyberattacks targeting public institutions. In recent years, ransomware gangs have hit the country’s defence department, pension funds, and even its national lab service during a health crisis.

Despite maintaining diplomatic ties with Russia—home to many ransomware groups—South Africa continues to be a frequent target of cybercriminals.

SAWS CEO Ishaam Abader is expected to address the attack on Thursday. Meanwhile, the organisation urges citizens and stakeholders to monitor social media for critical weather updates.