It was a Wednesday morning in June 2024 when a mid-sized bank woke up to a nightmare. The ATMs in Ntinda and Kabalagala were spitting out cash in irregular amounts. Customers were lining up, bewildered, some receiving double withdrawals while …
The early morning storm. On 12th September 2023, a sudden downpour turned Kampala Road into a river. While taxi drivers cursed and boda riders fought for shelter, a quiet disaster unfolded in the basement of a city-centre insurance company. Their …
The Tuesday morning breach On Tuesday, 13th February 2024, at exactly 9:18 a.m., a finance officer at a local SME clicked on an email link that looked routine, a “payment confirmation” from a well-known shipping partner. The email address matched …
On 4th September 2023, leaders at the agribusiness cooperative approved a UGX 280 million loan to a long-standing distribution partner. The justification was simple: the partner had been with them for 11 years, always paid on time, and was “part …
At 10:42 a.m. on Thursday, 18th January 2024, the operations manager of a large regional logistics company opened an email that appeared to come from their insurance partner. The subject line read: “Renewal Quotation for 2024 Coverage – Urgent Action …
On a Tuesday morning in March 2024, a procurement officer at a mid-sized local manufacturing company approved what looked like a routine payment to a long-time supplier of spare parts. The supplier had been with the company for over 12 …
“The attackers are not coming. They are already inside, and they are faster than you.” In March 2025, a mid-sized SACCO in central Uganda noticed something odd. An internal report had been edited at 2:13 AM by someone who was …
During one of our board-level presentations in August 2024, a financial institution’s Director asked, “You are the experts. How do the attackers identify their targets and exploit them?” The truth is that cybercriminals are highly organized. They take time to …
Data breaches are increasingly damaging businesses globally, with significant consequences for financial institutions and telecom companies. A notable example is the October 2020 cyberattack, where hackers exploited 2,000 mobile SIM cards to breach the mobile payment system. This attack targeted …
In today’s complex environment, employees have access to corporate networks and are authenticated to corporate systems, as well as servers, and devices. It is dire if a malicious attacker gets the same access either through brute force or by taking …