Listen to this Post
Lebanon’s two leading mobile operators, Touch and Alfa, are embroiled in a large‑scale cyber attack that has severely disrupted service for millions of subscribers across the country.
Event Details
- Nature of the Attack: Both operators report sustained external interference of a malicious, cyber nature, resulting in widespread call drops and dramatic slowdowns of mobile data.
- Timeline: The disruption began late on July 14, 2025, intensifying through the evening rush hours.
- Scale: Over 4 million mobile lines across Beirut, Mount Lebanon, the North, South, and Bekaa Valley have experienced degraded service.
Confirmation of Cyber Attack
- Official Alfa Statement: Alfa’s spokesperson confirmed the incident as a coordinated cyber attack targeting core network routers and radio‑frequency nodes, describing it as “a sophisticated breach by an unknown actor” aimed at compromising national telecom infrastructure.
- Touch’s Position: While Touch initially cited “external interference,” it has now acknowledged the attack vector and joined Alfa in declaring a state of emergency.
Emergency Response Measures
- Immediate Technical Countermeasures
- Isolation of affected network segments and deployment of emergency patches on core routers.
- Activation of redundant backhaul links to reroute traffic around compromised nodes.
- Regulatory & Government Involvement
- Operations are being overseen by the Ministry of Telecommunications and the Telecommunications Regulatory Authority, with cybersecurity experts from both public and private sectors engaged in forensic analysis.
- Subscriber Safeguards
- Provision of free data packages and call‑credit reimbursements for all impacted customers.
- A dedicated 24/7 support hotline and real‑time SMS alerts to keep subscribers informed.
image source: Redit
Impact on Subscribers
- Voice Calls: Up to 60% call failure rates in some districts during peak usage.
- Mobile Data: Average download speeds plunged by 80%, crippling video streaming, social media, and business connectivity.
- Emergency Services: Redundancy measures have so far preserved critical lines for ambulances, fire brigades, and security forces.
Fact Checker
- Alfa’s Official Confirmation: Alfa publicly defined the incident as a cyber attack in its July 15 press release, detailing intrusion into network controls.
- Ministry Oversight: The Ministry of Telecommunications has categorized the event as “nationally significant,” triggering a multi‑agency cybersecurity task force.
- Independent Analysis Pending: Forensic reports from third‑party cybersecurity firms are expected within 72 hours to identify the attack’s origin and methodology.
Predictions
Customer Assurance: Expect ongoing compensation programs including bonus data and extended validity periods—to restore customer confidence in the weeks ahead.
Enhanced Cyber Defenses: Both operators will likely accelerate deployment of AI‑driven anomaly detection and stronger encryption on network management channels.
Regulatory Push: The attack may prompt the Telecommunications Regulatory Authority to mandate stricter security standards and periodic penetration testing.
