South African Airways (SAA) confirmed it was hit by a cyberattack on Saturday, 3 May 2025, which briefly disrupted its website, mobile app, and some internal systems.

The airline announced in a release dated May 6 that it activated its disaster recovery and business continuity protocols, restoring essential services the same day and maintaining uninterrupted flight operations and customer support.

An investigation has been conducted with independent digital forensic experts to determine the source and scope of the incident, believed to involve external cybercriminals. The airline reported the breach to the State Security Agency, South African Police Service, and the Information Regulator, in compliance with national security and data protection laws.

Investigators are assessing whether any data was accessed or stolen. SAA has committed to notifying affected individuals if a breach is confirmed.