Massive Data Breach Exposes Somalia’s E-Visa System Flaws
Somalia’s newly launched electronic visa system has suffered a massive data breach, exposing sensitive personal details of thousands of applicants, including passport photos, ID documents and contact information. The breach, reported in early November, has raised serious concerns over data security, border management and the credibility of the country’s digital governance systems.
The e-visa platform, which was introduced in September 2025, was meant to streamline travel processing, enhance transparency and attract more visitors and investors to Somalia. However, cybersecurity experts say the system’s weak infrastructure and poor authentication measures likely left it vulnerable to intrusion. Leaked data reportedly includes information from foreign nationals such as diplomats, aid workers and business travelers, as well as Somali citizens returning from abroad.
Although the Somali government has yet to issue a detailed statement, independent investigators have pointed to a possible system misconfiguration or external hacking attempt as the cause of the breach. A full forensic audit has not been released and officials have not confirmed the number of affected individuals. The fallout has been immediate and widespread. The self-declared republic of Somaliland has announced that it will no longer recognize visas issued through Somalia’s e-visa system, citing data security concerns. Some airlines have also been warned by the Somali Civil Aviation Authority not to carry passengers without verified e-visas after reports of irregularities in visa verification processes. Foreign missions and international travelers have begun reviewing their pending applications amid fears of data misuse and confusion over travel requirements.
Analysts say the breach exposes deeper structural weaknesses in Somalia’s digital transformation drive. While the country passed a Data Protection Act in 2023, enforcement remains weak and coordination between federal and regional authorities is poor. Puntland, another semi-autonomous region, has also resisted implementing the national e-visa system, further complicating Somalia’s already fragmented border and travel management framework.
The breach undermines confidence in Somalia’s digital reforms and raises serious national security concerns. The government is under pressure to investigate, tighten cybersecurity measures and restore public trust in its online systems.