The Namibian Cyber Security Incident Response Team (Nam-CSIRT) has flagged a cybersecurity breach affecting the Otjiwarongo municipality’s systems, possibly involving stolen data and a ransom demand.
The incident was picked up on Wednesday through trusted threat intelligence sources. Preliminary findings indicate that a cybercriminal group known as ‘INC Ransom’ may be behind the attack, raising concerns about the security of municipal systems and sensitive information.
In a statement issued by the Communications Regulatory Authority of Namibia, under which Nam-CSIRT operates, chief executive Emilia Nghikembua confirms that the team has alerted the municipality and advised immediate containment steps.
These include mapping data to assess exposure and isolating affected systems to prevent further damage.
“Given the sensitivity of the matter, Nam-CSIRT has notified the municipality and recommended immediate containment measures,” she says.
“A formal investigation has been initiated,” Nghikembua adds.
While the full impact of the breach remains unclear, there is concern that the attackers may have accessed personal or confidential municipal data.
The municipality has not yet publicly confirmed what type of information may have been compromised or whether any public services have been disrupted.
Nam-CSIRT assures the public that t is treating the matter with urgency and will provide updates once it is safe to do so.
The team also emphasises the importance of not compromising the integrity of the ongoing investigation, urging patience as technical teams work to understand the scope of the attack.
This is the latest in a growing list of cyber incidents targeting public institutions, underscoring the need for stronger cybersecurity frameworks across all levels of government.
Experts have long warned that municipalities and local authorities are increasingly becoming attractive targets for ransomware groups due to limited resources and outdated systems.
As the investigation continues, stakeholders are being urged to remain vigilant and to report any suspicious activity related to the incident.
