In the early hours of July 28th, the outage affected voice, mobile data, and internet services nationwide. Unitel announced that it had activated response and containment mechanisms, but did not provide a timeframe for restoration. For more than a day, millions of customers were left without an explanation commensurate with the scale of the outage and its effects.

The restoration began at 11:45 AM on July 29th, gradually and locally. By 23:00 PM the following day, 2G and 3G networks had national coverage. On Friday, SMS and electronic top-ups returned. 4G and 5G networks returned in several areas, while other services continued to recover under the constant technical monitoring of the operator itself.

Four days may seem brief in a cybersecurity investigation, but they are long for a society dependent on mobile phones. Families without contact, merchants without payments, companies without authentication, and workers without network access don't experience the disruption as a statistic. They feel the loss of time, income, security, and the ability to make decisions in daily life.

The company reported that fixed fiber optic and microwave services were unaffected, preserving communications for public institutions and businesses. This result showed that fixed circuits held up, but confirmed that they do not replace the daily mobile access used by most of the population across the country during a prolonged national crisis.

The first public assessment remains incomplete. Unitel described the attack as deliberate and malicious, admitted to investigating a possible link to its IPO, and did not reveal the technical origin. Without an independent and verifiable explanation, the country will know the effects, but will not learn from the defense failures, the decisions made, and the limitations encountered in the response.

National vulnerability doesn't just result from the existence of an attack. It also results from concentration. When the majority of active cards, authentications, and daily communications depend on the same operator, a failure affects families, businesses, and institutions simultaneously. Scale expands coverage, but also increases the collective cost of each disruption.

Formal competition does not eliminate actual dependence. Angola has other operators and infrastructure, but most users remain connected to the same main network. Changing SIM cards, contracting a second service, or using fixed internet requires money, coverage, and equipment that many families and small businesses in Angola still do not have.

The consolidation of data brings together valuable information. Customer records, location data, call patterns, data consumption, payments, and business links form an archive of economic and social life. Even without proof of unauthorized access, this possibility necessitates treating the operator's cybersecurity as part of protecting citizens and national institutions.

The problem cannot be solved by administratively dividing customers. It requires policies that make competition real, portability simple, interconnection secure, and alternative coverage available outside urban centers. It requires that critical services maintain independent channels, capable of functioning when the most widely used commercial network enters a severe, prolonged national crisis.

INACOM regulates, supervises, and oversees the electronic communications market. Following this incident, this mission must translate into public questions regarding continuity, recovery tests, maximum downtime, communication with customers, and applicable sanctions for an infrastructure that supports millions of people across the country daily.

The attack demonstrated how the Angolan economy has become mobile. Mobile phones are no longer just for talking. They allow users to authorize payments, check balances, receive instructions, sell products, confirm deliveries, and maintain business connections with customers.

When the safety net disappears, the most vulnerable lose out first, because they have fewer financial alternatives to continue working and earning income. During the downtime, difficulties arose in paying salaries, making purchases, and meeting tax obligations.

These consequences reveal a dependence between telecommunications, banking, and public administration that is growing faster than the mechanisms for continuity. Digitization without emergency pathways makes services fragile during a prolonged, large-scale national disruption.

Large businesses can afford redundant connections, specialized technicians, and alternative suppliers. A street vendor, a taxi driver, a small restaurant, or a family dependent on remittances rarely has that kind of leeway.

Network failure translates into an unequal cost for those who depend on the daily flow of money, without reserves to wait for recovery or transfer their activity to another available channel. The same dependence affects the State.

Tax services, administrative portals, internal communications, and public payments need networks that can withstand the crisis of a single operator. Each digital service should indicate an alternative channel, the person responsible for activation, and the response time, so that citizens can fulfill their obligations during a prolonged national outage.

There is also a lack of public criteria for measuring the damage. How many sales failed, how many payments were delayed, how many services were inaccessible, and how many hours of work were lost? Without these numbers, the cybersecurity crisis ends when the signal returns, although the costs remain distributed among millions of people.

Responsibility begins with acknowledging losses incurred outside the operator's control and its accounts.

There is no public confirmation that personal data has been stolen, altered, or exposed. This lack of confirmation does not allow for reassuring conclusions or accusations without proof. It necessitates separating availability from confidentiality. A network can shut down without any data leak, but an attack on central systems requires a rigorous investigation into its actual scope.

The operator collects names, locations, usage records, and payment information. The Data Protection Act requires appropriate technical measures, while electronic communications legislation mandates notification without undue delay when security measures are breached. The public interest demands knowing whether these duties have been activated in accordance with the law.

Data protection cannot be treated as a detail reserved for engineers. A phone number associated with identity, location, and usage can be used for fraud, stalking, blackmail, or surveillance. The larger the customer base, the greater the responsibility to demonstrate that systems remain protected and properly segmented.

Communication should distinguish between confirmed facts, risks under investigation, and recommended measures. In the event of a potential compromise, customers need guidance on passwords, codes, fraudulent messages, and payment requests.

Prolonged silence creates space for rumors and secondary attacks, because criminals exploit uncertainty to impersonate companies and deceive people. The correct response should preserve the investigation without hiding responsibility.

Not all technical details need to be published while the threat remains active, but the country has the right to know the nature of the incident, the extent of the systems affected, the state of the data, and the corrective measures adopted. Transparency means being accountable for the protection ensured.

A national telecommunications network is integral to state security, even though it belongs to a private company. Emergency contacts, administrative orders, business communications, and information necessary for daily life circulate through it.

An attack capable of disrupting this structure tests the cybersecurity of the operator's servers and the preparedness of the institutions that must anticipate, coordinate, and respond together. The State needs to know the dependencies. It must identify the ministries, hospitals, banks, airports, security forces, media outlets, and emergency systems connected to each operator.

Next, you need to test alternative channels, switching, contacts, and the responsible personnel, because contracts do not guarantee continuity during a crisis. The national response also requires coordination.

The operator may control the systems, but the State must coordinate the regulator, the Data Protection Agency, the investigative services, the banking sector, and the entities responsible for critical infrastructure. Without a defined command, each institution protects its own fragment while society faces scattered information and contradictory decisions in response.

Public learning is another obligation. Reports on the incident should explain the chronology, the decisions made, the mechanisms that worked, the points of failure, and the necessary changes. The goal is not to expose vulnerabilities, but to prevent forgetfulness from paving the way for another rupture. Countries that treat each attack as an isolated episode repeat old mistakes and avoidable costs.

Angola has legal structures and entities with distributed competencies, but the attack necessitates assessing practical capacity. A national protocol should establish alert levels, decision-making authorities, contacts, notification deadlines, and public emergency channels. Without tested rules, the response will depend on improvisation during this nationwide crisis.

Digital sovereignty does not mean technological isolation or building all the pieces within borders. It means the national capacity to choose suppliers, understand dependencies, protect data, maintain services, and recover systems without being held hostage by a single external company or decision. A sovereign country needs to know its internal breaking points.

This capability begins with the cybersecurity architecture. Networks must have segmentation, backups, alternative routes, recovery centers, and procedures. Redundancies cannot exist only in audit documents. They need to be tested with simulated failures and controlled attacks involving managers, technicians, and regulators.

Sovereignty also demands diversity. The easier it is to switch operators, combine networks, and contract capacity, the less power a failure will have over collective life. The State must create conditions for competition, but also impose minimum continuity standards on all operators. The market cannot suspend the obligation to keep Angola always connected.

Transparency completes the system. Citizens need to know about availability, incidents, recovery times, and the quality of the response. Investors need to assess risks, and regulators need information to act.

Parliament should discuss whether communications are protected as an essential infrastructure and whether the duties correspond to their centrality. The incident should produce verifiable obligations. An audit can ascertain the sequence of the intrusion, the segmentation, the detection time, the isolation decisions, and the causes of the delay.

The regulator must translate these conclusions into defined deadlines, mandatory tests, and corrective measures, and must monitor their implementation without disclosing details that could facilitate new attacks against the national network.

Four days of disruption showed that the network is integrated into Angolan territory. Unitel recovered coverage and services, but the restoration did not erase the revealed dependency. An infrastructure used by millions of citizens needs cybersecurity defenses, alternatives, oversight, and duties proportionate to the influence it exerts on the economy and daily life.

The company, the regulator, the Data Protection Agency, the Government, and Parliament must explain what they have learned, correct what went wrong, and demonstrate that the country can continue to function. The investigation needs to clarify the origin of the attack, its technical scope, the state of the data, and the measures intended to prevent another similar disruption.

Digital sovereignty is measured by the ability to communicate, pay, work, ask for help, and keep the state functioning during a crisis. Without this capacity, independence remains limited, incomplete, and vulnerable.

Will the Unitel outage change the cybersecurity of essential Angolan networks? We want to know your opinion, feel free to comment, and if you liked the article, share it and give it a "like".