MOGADISHU (Somaliguardian) – Somalia’s controversial electronic visa system has been thrust into damaging uncertainty after a major cyberattack compromised sensitive data belonging to more than 35,000 applicants, prompting stern warnings from Western governments and exacerbating an escalating dispute with the breakaway region of Somaliland.
The breach – one of the most significant cybersecurity failures reported in Africa in recent years – exposed personal information now circulating widely on social media, including data belonging to U.S., British and other Western nationals.
The United States confirmed the incident on Thursday, citing widespread reports that unidentified actors infiltrated Somalia’s e-visa platform.
“On November 11, 2025, multiple sources reported credible allegations that unidentified hackers penetrated Somalia’s e-visa system potentially exposing the personal data of at least 35,000 people, including possibly thousands of U.S. citizens,” the U.S. Embassy in Mogadishu said. “Leaked data from the breach included visa applicants’ names, photos, dates and places of birth, email addresses, marital status, and home addresses.”
The Embassy added it could not verify whether any individual U.S. citizen’s information had been compromised.
Britain issued a parallel advisory, urging its nationals to weigh the risks before filing visa applications.
“Leaked data from the breach includes visa applicants’ names, photos, dates and places of birth, email addresses, marital status, and home addresses. This data breach is ongoing and could expose any personal data you enter into the system,” the UK Embassy in Mogadishu said. “An eVisa is required before travelling to Somalia. Consider the risks before applying.”
The incident deepens long-running concerns about the security architecture of Somalia’s e-visa platform, which critics have accused of prioritising revenue generation – even in territories beyond Mogadishu’s control – over data protection and technical integrity. The program is operated by a firm linked to the family of Somalia’s president, and is believed to funnel roughly half of its revenue to the company.
Somaliland Tensions Intensify
The hacking revelation was met with open celebration in Somaliland, whose authorities have rejected Mogadishu’s e-visa system and instructed airlines not to enforce it, insisting instead on visa-on-arrival procedures at Hargeisa’s airport.
It also landed days after Somaliland escalated what it called “war” with Somalia over airspace and visa authority, though there is no evidence or official claim linking the region to the cyberattack.
The breach has triggered unease among Western diplomats, contractors, and security personnel stationed in Somalia, several of whom have reportedly left the country amid fears their data may have been compromised.
Aviation Dispute Deepens
Meanwhile, the long-running contest over control of Somali airspace has sharpened. Somaliland this week began issuing its own directives to aircraft transiting its airspace, following a declaration that overflight permits would be required as of November 10. Some flights encountered simultaneous, conflicting instructions from Mogadishu and Hargeisa, raising collision concerns. Somalia’s aviation authorities have since halted transmissions to aircraft over Somaliland to avoid confusion.
Many carriers have diverted traffic toward Djibouti amid heightened security risks.
A Perilous Moment for Mogadishu
The developments leave Mogadishu facing what analysts describe as the brink of losing both the airspace and visa confrontations with Somaliland. Although Somalia regained international recognition for airspace control in recent years, the system was initially jointly managed with Hargeisa until Somaliland’s representatives were removed from the Mogadishu control centre.
Somaliland has since strengthened its capabilities with Taiwanese-supplied training and equipment, enabling it to challenge Mogadishu’s authority more forcefully.
Together, the airspace standoff and the sweeping e-visa data breach have inflicted a significant reputational blow on Somalia’s federal administration, raising doubts about its reliability as a custodian of national infrastructure and sensitive personal data.
Contact us: info@somaliguardian.com
