In 2025, regulation forced Africa’s cyber incidents into the open

African regulatory frameworks in 2025 are compelling organisations to publicly disclose cyber incidents, marking a shift toward transparency in data breach reporting. This trend aligns with South Africa's POPIA enforcement requiring breach notifications to the Information Regulator and affected parties, potentially increasing visibility of cybersecurity failures across the continent.