Uganda’s Ministry of Finance has confirmed a cyberattack on the country’s central bank systems but refuted claims that hackers stole as much as $17 million.
The incident, which occurred two weeks ago, is currently under investigation by the Auditor General and the Criminal Investigations Department (CID).
Speaking to lawmakers on Thursday, Minister of State for Finance, Henry Musasizi, acknowledged the breach but downplayed the reported losses.
“It is true that our account was hacked, but not to the extent of what is being reported,” Musasizi said.
He assured Parliament that a full report would be presented in a month, urging patience to avoid the spread of misinformation.
Both the Bank of Uganda and police officials have refrained from commenting until investigations are concluded.
Conflicting media reports on stolen amounts
Local media reports have presented differing accounts of the amount stolen. The New Vision newspaper reported that a hacking group known as “Waste,” allegedly based in Southeast Asia, siphoned off 62 billion Ugandan shillings (approximately $17 million).
- The Daily Monitor newspaper placed the stolen amount at 47.8 billion shillings (about $13 million), stating that the funds were transferred to accounts in Japan and the UK.
- According to the Monitor, UK authorities have frozen $7 million of the stolen funds, though a portion had already been withdrawn. The syndicate is also reported to have successfully moved $6 million to Japan.
- The breach has raised significant concerns among lawmakers. Opposition MP Joel Ssenyonyi expressed alarm over the attack on the central bank and called for more clarity.
“It alarmed me because this is our central bank. I thought the government should help us understand; it is important that we know what exactly is happening,” Ssenyonyi told Parliament.
What you should know
This breach highlights the growing threat of cybercrime targeting financial institutions globally.
A recent report by the International Monetary Fund (IMF) has revealed that financial institutions lost a total of $12 billion to cyberattacks in the last 20 years.
- Out of this amount, $2.5 billion was lost between 2020 and 2024, according to IMF’s April 2024 Global Financial Stability Report.
- This is even as the body expressed concern that the rising incidents of cyberattacks on financial institutions globally could affect confidence in the financial system and destabilize economies.
- According to the body, financial firms, given the large amounts of sensitive data and transactions they handle, are often targeted by criminals seeking to steal money or disrupt economic activity.