US warns thousands of people’s data exposed

The US Embassy in Somalia has warned that a major data breach in Somalia’s e-visa system may have exposed personal information of tens of thousands of applicants, including US citizens.

It said it had received credible reports that “unknown hackers” had hacked the Somali government’s e-visa platform, potentially putting the data of at least 35,000 people at risk.

The leaked documents circulating online include names, photos, dates of birth, marital status, home addresses and email contacts. According to a statement from the US Embassy issued Thursday.

“This data breach is ongoing and could expose any personal data you enter into the system.” The United Kingdom also warned travelers.

“Think about the risks before applying for the e-visa needed to travel to Somalia.”

The Somali authorities did not comment on the violation. But the government changed the visa service from evisa.gov.so to etas.gov.soWithout providing an official explanation.

“While the Mogadishu Embassy is unable to confirm whether an individual’s data was part of the breach, individuals who have applied for a Somali e-visa may be affected,” the US statement said.

The BBC has contacted the Somali Civil Aviation Authority for comment.

The new system in Somalia requires all travelers, including those from the self-declared Republic of Somaliland and the semi-autonomous region of Puntland, to apply for visas online.

Critics say travelers have faced additional fees in certain areas, amounting to double fees.

The Somaliland government, which declared its independence in 1991, governs itself with its own institutions but is not internationally recognized. Somalia insists that the area remains part of its sovereign territory.

The alleged violation adds to long-standing tensions between Mogadishu and Hargeisa over control of Somali airspace. While Somalia regained full control of its airspace in 2017, Somaliland continues to object to this arrangement.

The dispute escalated further this week when Somaliland President Abdirahman Ayro said Somaliland would not accept Somali e-visas and ordered airlines to obtain clearance from Hargeisa before entering its airspace.

However, major airlines refused to board passengers without Somalia’s approval of the e-visa.

On Saturday, Somaliland Foreign Minister Abdirahman Dahir Adan insisted again that “anyone traveling to Somaliland will receive a visa on arrival,” saying that Somalia’s e-visa system is not secure, warning that “people’s data could fall into the hands of extremist groups” as a result of its use.

The standoff has left some travelers heading to Somaliland stranded at airports after they were denied boarding due to not having a Somalia e-visa.

Somaliland’s Civil Aviation Minister, Fuad Ahmed Knox, told the BBC that the directives – which were first announced earlier this year – came into effect on 10 November.

He said that airlines that do not adhere to the decision will be asked to divert their course, and claimed that many planes have already been rerouted.

Footage released by Somaliland’s Ministry of Aviation appears to show local air traffic controllers issuing instructions to international pilots – a move that was celebrated locally as an affirmation of Somaliland’s independence.

But the Somali Civil Aviation Authority insists it retains sole administrative and legal control over the Mogadishu FIR, which covers the entire country’s airspace. All aircraft were ordered to ignore any instructions issued by authorities other than Mogadishu.

It warned that failure to adhere to Somali and international aviation rules could pose safety risks and lead to “serious legal consequences.”

Additional reporting by Natasha Botti.