South African Airways (SAA) announced today that it experienced a significant cyber incident beginning on Saturday, 3 May 2025.
The breach temporarily disrupted access to the airline’s website, mobile app, and internal systems, prompting immediate action to minimize operational impact.
Upon detection, SAA activated its disaster recovery protocols, successfully containing the breach and ensuring minimal disruption to flight operations.
Key customer service channels, including contact centers and sales offices, remained functional. Full system restoration was completed the same day.
Investigation & Regulatory Compliance
An independent forensic investigation is underway to determine the root cause and scope of the attack, including whether it was an external cybercrime act.
As a National Key Point, SAA has:
-
Reported the incident to the State Security Agency (SSA) and SAPS
-
Notified the Information Regulator under POPIA
Data Security & Customer Assurance
Preliminary findings are assessing if data was accessed or exfiltrated. If confirmed, affected parties will be notified per regulatory requirements.
Official Statement from SAA CEO
Prof. John Lamola, Group CEO of South African Airways, stated:
“The security and integrity of our business systems and the protection of the consumer data entrusted to us remain our highest priority. In response to the cyber incident that began on May 3rd, we acted swiftly to contain the disruption, restore services, and initiate a comprehensive investigation.
“Our robust business continuity measures ensured operational stability, particularly for our valued customers.
“I want to assure all stakeholders, including our partners, customers, and dedicated employees, that we are taking every necessary step to determine the root cause of this incident, strengthen our security framework, and mitigate any potential risks. SAA remains committed to delivering safe, reliable, and resilient service.”
SAA continues collaborating with law enforcement and cybersecurity experts, reinforcing its commitment to system integrity and passenger safety.
