US and UK warn of major e-visa data breach in Somalia

A significant cybersecurity incident has rocked Somalia’s electronic visa system, potentially exposing sensitive personal information of tens of thousands of applicants, including US citizens. The US Embassy in Somalia issued a stark warning on Thursday, citing credible reports that unidentified hackers had infiltrated the government’s e-visa platform. The breach, which remains ongoing, has reportedly compromised data such as names, photographs, dates of birth, marital statuses, home addresses, and email contacts. The UK has also advised travelers to weigh the risks before applying for an e-visa to Somalia, emphasizing the potential dangers of submitting personal information to the compromised system. Somali authorities have yet to comment on the breach, but the government has quietly transitioned its visa services from evisa.gov.so to etas.gov.so without providing an official explanation. The US Embassy noted that while it cannot confirm individual involvement in the breach, all applicants who have used the e-visa system may be affected. The incident has further strained tensions between Somalia and the self-declared republic of Somaliland, which has refused to recognize Somalia’s e-visa system. Somaliland’s Foreign Minister warned that the system is unsafe, raising concerns that personal data could fall into the hands of extremist groups. The dispute has left some travelers stranded at airports, as airlines refuse to board passengers without Somalia’s e-visa approval. Meanwhile, Somaliland’s Civil Aviation Minister has asserted that airlines must now obtain clearance from Hargeisa before entering its airspace, a directive that has already led to several aircraft being rerouted. The Somalia Civil Aviation Authority, however, maintains sole control over the nation’s airspace and has warned that non-compliance with its directives could result in serious legal consequences.