National Domain System Cyber Attack Contained, Government Says
Sia Lucy Kannah Sierra Leone’s Ministry of Communication, Technology and Innovation has issued an official release regarding a security breach that compromised the country’s national “.sl” internet domain system, which manages web addresses for government bodies, private businesses, and local organisations.
The unauthorised access occurred on September 25, 2026, through the CoCCA domain management system, a software framework used globally for domain administration. In Sierra Leone, 44 domain names were targeted, including one government portal alongside multiple commercial websites. Officials noted that the breach presented a temporary risk of visitors being maliciously redirected to fraudulent websites.
According to a security report published by Google on October 6, 2026, the incident in Sierra Leone was part of a broader global series of cyberattacks targeting domain management systems. Other jurisdictions affected by similar incidents included Ghana and American Samoa.
Ministry officials confirmed that the breach was detected and contained on the day it occurred, with all affected web addresses restored to their proper configurations within hours. Immediate security protocols were deployed to block further unauthorised activity, remove the immediate threat, and fortify system defences. A follow-up security review completed on October 8, 2026, revealed no evidence of ongoing unauthorised access.
While the immediate vulnerability has been mitigated, investigations are still active to determine the precise entry point of the breach and evaluate any potential secondary risks.
Finally, the Ministry reaffirms its commitment to safeguarding the country’s digital infrastructure and will keep the public informed of any significant developments.
