cybersecurity

Costs of a Data Breach to Your South African Business

Posted on 1 October 202521 October 2025 by Vivienne Fouche

Money, reputation, customers: A cyberattack is costly in multiple ways

It’s estimated that cyberattacks will cost the South African economy R2.2 billion in 2025. That’s according to a recent Vodacom Business report, which revealed that 80% percent of South African businesses had experienced a cyberattack during 2024.

These are incredibly high numbers.

Firstly, the fact that 8 out of every 10 local businesses was attacked last year underscores the persistence and determination of cybercriminals as they attempt data breaches.

As for the resultant costs of a data breach – R2.2 billion – these add up in a number of different ways, both directly and indirectly.

Firstly, there’s the ransomware that must be paid if the cybercriminals succeed in breaching an organisation and encrypting its data. The attackers then demand a ransom to provide the decryption key and restore access, sometimes threatening to leak stolen data if the payment isn’t made.

Even if the organisation pays the ransom, this is not always a guarantee that the decryption key will be handed over. It seems that there isn’t always ‘honour among thieves’.

In addition, there will be incident response and recovery costs to pay, with significant expenses for hiring in consultants to carry out recovery efforts, forensic investigations and system restoration.

But these direct costs aren’t the end of the story – indirect costs are also incurred as a result of a successful cyberattack.

This includes through operational downtime, leading to lost productivity and revenue; reputational damage, causing potential new customers choosing to go elsewhere; and legal and regulatory costs, with companies facing possible fines from regulatory agencies for failing to protect sensitive data (and there may even be lawsuits from affected parties).

Costs of a Data Breach in South Africa

Over the past two years, advancements in artificial intelligence and machine learning have equipped cybercriminals to orchestrate and successfully execute sophisticated cyberattacks. From phishing, malware, ransomware, identity theft, hacking, social media fraud to social engineering, cyber threats are no longer simply a technology problem but a business problem.

South Africa is no exception – we were recently ranked as being the number 1 target for cyberattacks in Africa. No matter its size, every business is a possible target for cyberattackers[1].

Other frightening statistics include the following:

40% of ransomware attacks in Africa recently occurred in SA; and
We also claimed 35% of infostealer incidents across the continent.

Factors contributing to SA’s #1 position as most attacked country in Africa include:

A lack of cybercrime investment;
Ineffective law enforcement prosecution; and
Lack of awareness.

Cybersecurity incidents on government bodies, such as the South African Weather Service and the National Health Laboratory Service, and well-established brands like Dis-Chem, show how vulnerable local organisations can be in the face of these rising threat levels.

How to Reduce the Expected Cost of a Data Breach

Organisations that proactively reduce their attack surface and improve recovery capability materially lower the potential cost of a breach. Focus on four priority areas:

Prevent

Deploy layered defences (endpoint protection, firewall, email security and web filtering).
Train staff regularly on phishing, social engineering and secure practices.
Apply strong access controls and multi-factor authentication.

Detect

Implement continuous monitoring and logging to identify anomalous behaviour quickly.
Use managed threat detection services where in-house capability is limited.

Respond

Maintain a tested incident response plan with defined roles, communication templates and escalation paths.
Engage forensic and legal partners on retainer to reduce response time.

Recover

Ensure immutable, tested backups and documented recovery runbooks.
Use segmented network design and least-privilege policies to limit lateral movement.

Protecting Your Organisation from Cyberattacks

A firewall is your network’s first line of defence against the cybersecurity threats of the public internet. You could think of firewalls as the gatekeepers to the public internet for your network users, filtering out threats and enabling them to connect safely to the sites and applications where they need access to do their work.

Existing as both hardware and software, firewalls are designed to restrict access to your organisation’s sensitive data while helping you monitor your network for suspicious activity.

Too many organisations still see cyberattacks as an irrelevant global problem, not a high-risk local threat. It’s imperative to make sure that your company has the necessary defence mechanisms in place, starting with identifying the risks and implementing an incident response plan.

Contact Vox and Sophos to find out more about how we can assist you.

Frequently Asked Questions

What is the typical data breach cost for South African businesses?
Data breach cost varies widely, but South African firms face direct and indirect losses including ransom payments, recovery, legal fees and reputational damage, often totalling tens of thousands to millions of rand.

How does ransomware affect data breach cost?
Ransomware dramatically increases data breach cost through demanded payments, extended downtime, forensic investigations and possible double extortion, as well as the risk that paid ransoms do not yield reliable decryption.

Are small businesses in South Africa at risk of cyberattacks?
Yes, small businesses are frequent targets. This is because limited budgets, weak defences and lack of awareness make them vulnerable, increasing the likelihood of high data breach cost and reputational harm.

What are the most common cyber threats facing South African businesses?
Phishing, malware, ransomware, identity theft and social engineering are most common, driven by AI‑enhanced tactics and posing major challenges for cybersecurity South Africa across sectors.

How much does operational downtime add to the overall data breach cost?
Operational downtime can multiply losses through lost revenue, reduced productivity and contractual penalties, often matching or exceeding direct remediation costs in severe incidents.

Is paying a ransom a reliable way to restore data?
No. Paying a ransom is risky, because attackers may not provide decryption or may demand more, and paying can increase overall data breach cost and legal or ethical complications.

What indirect costs should businesses anticipate after a cyberattack?
Anticipate indirect costs like reputational damage, customer churn, regulatory fines, legal claims, increased insurance premiums and long‑term loss of market trust, all contributing substantially to data breach cost.

What practical steps reduce data breach cost and improve cybersecurity in South Africa?
Implement firewalls, regular backups, employee training, incident response plans and patch management; invest in monitoring and third‑party partnerships to lower data breach cost and strengthen cybersecurity South Africa defences.

[1] Source: Newzroom Afrika

Is Your Business Wi-Fi Due for an Upgrade?

Posted on 21 May 202521 May 2025 by Craig Blignaut

A better Wi-Fi environment brings increased productivity to your employees and your organisation

Business Wi-Fi provides your employees with their gateway to the Internet, including operations in the Cloud. This requires stability and reliability – and as your business grows, your Wi-Fi needs may change. What worked for your organisation yesterday may not be sufficient in the future as your company’s Wi-Fi requirements increase.

Perhaps your organisation’s infrastructure was installed a few years ago, but as cost-effectively as possible – it may have been that the Wi-Fi requirement then wasn’t as much of a focus point as it has since become. Now, your organisation is growing and the need for improved Wi-Fi services is apparent.

Let’s have a look at why your business Wi-Fi may be due for an upgrade – and the steps you can take to implement this.

A Better Wi-Fi Environment Brings Increased Productivity

Wi-Fi has been around for the past 25 to 30 years and has evolved significantly during that time. With vastly more applications and computer programs available today, a much higher throughput is required to maximise the experience of the users in your organisations.

The days of having a single room with Wi-Fi access in it within the entire premises, or a dedicated area across the particular floor in the building, are long gone. People today expect Wi-Fi access in every environment that they move into. Your corporate solution therefore needs to work properly and enable productivity – you don’t want your employees being forced to spend five to 10 minutes trying to connect. Conversely, a better Wi-Fi environment brings increased productivity.

With a clear requirement for functionally excellent Wi-Fi access throughout the organisation, it may be time to invest in better, enterprise-level equipment, and an organisation that can assist you in managing and planning the Wi-Fi design as efficiently as possible.

Advantages of Upgrading Your Business Wi-Fi Network

Vox provides managed Wi-Fi services for businesses. This enables remote software and firmware updates, and reduced technician call-outs, through remote troubleshooting and fault remediation.

One of our services is offering audits on existing Wi-Fi, because with legacy old equipment, security becomes a risk. We also know that not every business is looking for brand-new Wi-Fi in a new building from scratch. Very often, we find that we’re taking over the legacy Wi-Fi previously used by the company, and we may be able to upgrade the existing assets or infrastructure.

The advantages of upgrading your business Wi-Fi network include the following:

Increased speed and bandwidth;
Improved connection reliability;
Improved security and privacy; and
Easier setup and management.

Security alone is a particularly serious issue, as network threats are becoming increasingly sophisticated. At Vox, we are keenly aware of the need to carry out regular software updates on our network equipment, such as access points and switches, as is necessary with all technology.

An access point can become a security risk if no one is managing it: for example, the manufacturer could find security vulnerabilities with certain equipment, and if it doesn’t get a security patch or update, the access point becomes vulnerable.

Overcoming Wi-Fi Challenges Presented by Infrastructure

The construction materials used in buildings, such as concrete, glass, brick and metal, can interfere with Wi-Fi signals and obstruct them in different ways, especially in larger or older buildings with thick walls. To counteract this challenge, Vox uses specialised software to create virtual models of your office space.

This software considers the different structural properties of the various building materials, allowing you to predict how Wi-Fi signals will travel and where obstacles might cause issues.

This virtual planning considers such factors as signal strength as well as how to determine the best access point and placement for access points and switches, to optimise network performance and capacity in areas where it’s needed most.

Vox Managed Wi-Fi Solutions

Our business Wi-Fi offerings are designed to optimise your Wi-Fi coverage, extend range and expand networking possibilities, enhancing the user experience and providing seamless, reliable connectivity for all devices, as follows:

Solve network issues and limit service centre interaction, reducing technical call outs. Network analytics provides information such as alarms, incidents and client experience information, including time to connect to the access points.
Radio Frequency (RF) design and planning: Our RF heatmap design software enables correct planning, scoping and implementation to improve overall Wi-Fi experience for both users and organisations.
Enterprise Equipment: Vox partners with enterprise grade equipment vendors, such as Ruckus Networks, to provide robust equipment from access points to managed switches and management cloud platforms, offering enhanced Wi-Fi connections and capacity for concurrent user devices.

Bespoke Managed Wi-Fi Solutions with Vox

The benefits of managed Wi-Fi solutions ensure, for example, that your organisation carries out regular, planned security updates in the same way as for our phones and computers. Vox offers any organisation a bespoke Wi-Fi solution according to their particular requirements.

We also understand the requirements of speed versus capacity. For example, your organisation might have a boardroom that is required to facilitate a meeting with 100 people in it once a week, and otherwise is seldom used. At Vox, we understand how to cater to the capacity that may be only required from time to time.

A managed Wi-Fi solution also offers convenience, as our Service Centre is able to remotely troubleshoot and improve network performance using cloud-based administrative tools. This ensures that more connected devices can enjoy uninterrupted Wi-Fi in your business.

It all speaks to ongoing connectivity, which in turn speaks to improved productivity.

Is your business Wi-Fi due for an upgrade? Feel free to reach out to us on 087 805 5050 or via email on corporatesales@voxtelecom.co.za and begin a discussion.

Don’t Sleep on Data Backup and Recovery

Posted on 18 October 2024 by Vivienne Fouche

Even Presidents Can Be Hacked

Data is the life blood of all organisations, and any loss of data can have serious implications for a business. The sudden loss of sensitive financial records or confidential information would be devastating to a company, with potential consequences including operational disruption, financial loss and reputational damage, as well as emotional distress to its customers.

Data loss can occur in many different ways. A hardware failure, a power outage, a natural disaster, or a cyber attack could all result in the loss of critical business data. Without a data backup plan, your organisation could be at risk of losing everything.

This means it’s essential to have proactive cybersecurity in place, as well as steps to control data backup and recovery, to protect an organisation’s digital assets. Having a reliable and redundant backup solution can assist companies to recover from incidents such as ransomware or hardware failure.

Three, Two, One: Go! For Data Backup

Data backup is a proactive measure that involves creating duplicate copies of critical data to guard against potential loss. These copies act as insurance against unforeseen events like hardware failures, accidental deletions and even cyberattacks.

Establishing a reliable backup strategy is like giving yourself a digital safety net to protect against risks – or an insurance policy, to put it another way.

Effectively implementing data backup and cybersecurity requires a strategic approach. Establishing a solid data backup plan involves adhering to the 3-2-1 backup rule, which has been used for many years and is supported by solution providers, businesses and even governments.

The 3-2-1 backup rule outlines that three backups must be kept, two of which should be on two different media (usually disk and tape), while one copy must be outside the primary data centre. This approach ensures protection against various scenarios, from hardware failures to natural disasters.

SA President Not Immune from Ransomware Attacks

South African government institutions have been battered by ransomware gangs over the last year.

The Development Bank of Southern Africa was targeted by a ransomware attack in June 2024, with servers, logfiles and documents stolen. In September this year, South Africa’s defence department was hacked by a gang that also allegedly leaked the personal phone number and email of President Cyril Ramaphosa, as well as a portion of the 1.6 terabytes of data stolen from the country’s defence systems.

The country’s International Trade Administration Commission also said it was hit with ransomware in early 2024. More recently, in June, the National Health Laboratory Service (NHLS) was targeted by a ransomware attack in which hackers deleted sections of their system, including backup servers, which meant that they were required to rebuild many of the affected parts. The attack took place at a time when Mpox outbreaks in the country were of concern.

These statistics show that data loss is a severe problem that can have a significant impact on an organisation, causing financial and reputational damage.

Protect Your Data with Vox

At Vox, we understand the critical importance of keeping your data safe with a backup and recovery plan. As a Veeam Gold Partner, we offer your business the opportunity to create a copy of your data through our Backup as a Service, which uses the 3-2-1 rule.

As a trusted leader in the data protection space, Veeam provides backup, recovery and replication for critical workloads, like VMware, AWS, Microsoft Azure, SQL Server, Oracle, Windows, Linux and NAS, across physical, virtual and cloud platforms, in a single offering.

With the Vox 3-2-1 Backup solution, we provide an onsite data store for fast local restores, and replicates the data to our Cloud repository in case of major onsite disaster. It supports onsite virtual or physical servers as well as Windows and Linux desktops.

We offer a number of benefits:

A fully managed solution with proactive monitoring to ensure data isn’t lost
Ongoing integrity testing ensures that data is not corrupt and that backups can be recovered
The option to quickly restore to Vox Cloud so that users can continue to work.

Companies implementing a backup strategy often only keep data on-site, believing this to be infallible. However, a ransomware attack or critical hardware failure, in most instances, renders the data unrecoverable. With our Vox solution, you can protect against this risk by adding an additional layer of redundancy, as follows:

3 copies of your data: This is the primary copy of the data you are using as well as two backups.
Saved on 2 different mediums: In addition to your primary copy, an onsite NAS device stores your backups, enabling quick restore functionality to reduce downtime.
1 copy offsite in the Vox Cloud: Using Veeam’s Cloud connect, a backup copy is stored and maintained in the Vox Cloud.

The urgency to backup data lies in the potential devastation that is caused by data loss. You don’t want your organisation to become another statistic – or another bad news story in the headlines.

Has Modern Internet Usage Made Us More Vulnerable?

Posted on 4 October 20244 October 2024 by Vivienne Fouche

Imagine a world in which people are completely reliant on a Super-Machine for all their needs…

Living in self-contained areas, they have little social contact, but are content because they’re sheltered and warm, with access to food, communication and entertainment – all enabled by the Machine. But one day the Machine goes down, and society crashes into a new reality. Does it sound… plausible? This is actually the plot of a science-fiction book written by EM Forster, called ‘The Machine Stops’.

In the real world, when people ‘sheltered in place’ during the Covid-19 pandemic, South Africans embraced online communication, shopping, banking, remote working and entertainment like never before – and when the pandemic eased, many people didn’t particularly want to go back ‘outside’ in quite the same way.

So even though we aren’t living in the sci-fi world of ‘the Machine’, the question is: How reliant are people today on the Internet? And has modern Internet usage made us more vulnerable to previously unimagined threats? The answers might be a bit shocking.

The Power’s Out

Let’s start with one of the basics: electricity. In South Africa, we’re used to power outages. Over time, we’ve come up with multiple solutions to deal with challenges like no heating or lights, cooking on gas instead of electricity, and having the Wi-Fi go down. But that was all because of Eskom’s troubles, which (whisper so as not to jinx things) might be on the mend at last?

Much more alarmingly, there are places in the world where the power can be taken out by acts of war, because the rise of technology means infrastructure is now linked to the online world. This brings improved functionality to critical national infrastructure sites around the world, but also new vulnerabilities – including electricity grids.

For example, Ukraine has experienced documented cases of cyber attacks on its power grid that have been attributed to its Russian enemies, in addition to actual physical attacks via traditional weapons of war.

The reality is that the Internet is now so intricately involved with our critical infrastructure that power outages – which can be life threatening in some situations – can be caused by online activity as well as physical damage. So yes – modern Internet usage has definitely made us more valuable to this particular threat.

The Internet of Threats

On a smaller scale than targeting national infrastructure, there are other ways in which the Internet can cause us to be vulnerable in our daily lives.

We’re used to connecting different devices to the Internet, including industrial sensors and CCTV cameras, as well as home devices such as security cameras (again), Internet routers, smart utility meters, connected TVs, and monitors for our small children’s bedrooms. Together, they form part of the Internet of Things (IoT), geared to make life easier.

However, many of these devices are set up with a default password already installed -that is something as basic as ‘Password’ – with the onus on the owner or installer of the IoT device to change it once in use. But frequently, the password isn’t changed – and in addition, there are lists of widely available (if you know where to look) IoT device passwords available on the Internet for threat actors to access quite easily.

The danger of IoT devices being hacked includes strangers spying on your home and frightening your kids through the baby monitor (yes, this really has been done), as well as, at a more industrial level, being turned into ‘zombie bots’. The so-called zombies become part of a botnet – a network of private computers or IoT devices infected with malicious software, and controlled as a group (without the individual owners’ knowledge) to carry out cyber crimes.

In late May 2024, the US Federal Bureau of Investigation (FBI) carried out an operation to take down what was thought to have been the world’s biggest-ever botnet, made up of millions of computers, in nearly 200 countries, that had been infected with malware. Selling access to this network enabled serious crimes around the globe, including financial fraud, identity theft and bomb threats.

It sounds like something from the movies, but unfortunately it’s not – it’s a reality today of modern Internet usage. So how do people and countries protect themselves from such possible cyber threats?

Protecting Your Data and Yourself

There’s obviously not a great deal that individuals can do to protect national infrastructure – that’s up to the sovereign nations concerned. As far as IoT devices are concerned, hopefully manufacturers, service providers and security experts are becoming more invested in developing effective strategies to improve their security – but it’s imperative that the consumer also shares the responsibility.

Here are some tips to make yourself less vulnerable to Internet threats:

For any device in your home: change the default password to something stronger.
Ensure that you have a strong Wi-Fi password for your home network.
Install all updates from the manufacturer to ensure you have the latest security patches.
Install, and then continue to update, anti-virus and malware software on your computers.

We are definitely more connected today than ever before – even if not actually within an all-powerful Machine – but at the same time, we have also become more vulnerable to threats from the Internet. Terrorists and criminals have shown their ability – and unfortunately their willingness – to use technology to harm countries, organisations and individuals. The reality is that no one is immune.

Here at Vox, we understand the vulnerability that comes with modern Internet usage. The only way to stop cyber criminals from making use of ‘the Machine’ in ways that unleash harm is to be constantly more aware and proactive.

How 5G Networks Can Strengthen Your Business Cybersecurity

Posted on 29 August 202411 November 2025 by Chris Boshoff

The rollout of 5G technology is revolutionising more than just network speeds—it’s reshaping enterprise cybersecurity. With stronger encryption, smarter authentication, real-time monitoring, and network segmentation, 5G delivers an advanced security framework that helps businesses proactively defend against cyber threats.

Below, we explore how 5G enhances cybersecurity and strengthens your company’s digital resilience.

Key Cybersecurity Benefits of 5G Networks

Enhanced data encryption
Stronger privacy protection
Network slicing for isolated security zones
Multi-layered authentication
Real-time threat monitoring and anomaly detection
Edge computing security advantages
Automated security responses
Secure connectivity for large device ecosystems
AI and machine learning-driven threat prevention
Improved global roaming security

Let’s unpack how these 5G capabilities work to secure your business.

1. Enterprise-Grade Data Encryption

5G introduces next-generation encryption, including 256-bit encryption standards and advanced cryptographic algorithms—future-proofing networks, even against emerging quantum computing threats.

Why this matters:
Sensitive business data is significantly harder to intercept or decrypt, drastically reducing exposure to cybercrime.

2. Stronger Privacy & Identity Protection

Unlike 4G, 5G masks user identities using a Subscriber Concealed Identity (SUCI) instead of transmitting personal identifiers in plain text.

What this means for business:
Better protection for confidential internal data, customer profiles, and proprietary information.

3. Network Slicing: Custom Security Zones for Your Business

5G allows multiple isolated virtual networks to run on the same infrastructure. Each can have tailored security controls, access rules, and monitoring.

Security advantage:
If a breach occurs in one slice, it can be instantly quarantined—leaving the rest of the network untouched.

4. More Secure Authentication

5G strengthens access control through:

Multi-factor authentication (MFA)
Secure device verification
Asymmetric encryption-based identity validation

Result:
Fewer risk points, less impersonation, and tighter access control across networks and connected devices.

5. Real-Time Threat Monitoring and Detection

Powered by machine learning analytics, 5G monitors networks in real time to detect unusual activity and security anomalies at internet scale.

Security outcome:
Faster detection = faster response = fewer breaches.

6. Edge Computing for Reduced Attack Surfaces

5G can process data closer to its origin rather than routing everything through central servers.

Benefits include:

Lower risk of data exposure
Faster incident response
Fewer network choke points for attackers

7. Automated Cybersecurity Response

5G networks can support self-automated threat detection and mitigation, reducing reliance on manual intervention.

Impact on business:
Shorter vulnerability windows, fewer successful exploits, and less operational downtime.

8. High-Volume Device Security

With capacity for up to 1 million connected devices per square kilometre, 5G delivers scalable, secure support for large device ecosystems.

Security benefit:
Centralised security oversight, real-time monitoring, and stronger endpoint protection across massive connected environments.

9. AI-Driven Cyber Defence

The ultra-low latency and high throughput of 5G allows AI and machine learning security models to respond instantly to emerging threats.

Bottom line:
Cybersecurity becomes predictive, not reactive.

10. Safer Global Roaming & Network-to-Network Security

5G replaces outdated roaming protocols like SS7 and Diameter with the Security Edge Protection Proxy (SEPP)—creating a unified, encrypted communication layer between global networks.

Advantage:
Improved protection for businesses operating across borders, especially those with mobile or roaming workforces.

5G Is a Major Leap Forward for Business Security

5G is no longer just about faster internet—it is a cybersecurity enabler that provides:

Stronger encryption
Smarter authentication
Intelligent threat monitoring
Network isolation and control
Faster automated responses

For businesses navigating an increasingly unpredictable digital threat landscape, 5G delivers a future-ready security foundation.

🔐 Secure Your Business with 5G-Enabled Cyber Protection

The companies that adopt 5G aren’t just upgrading their networks—they’re upgrading their security strategy.

Want to explore how 5G can protect and enable your business? Get in touch with Vox to future-proof your organisation today.