South African Infrastructure Staggered by 1,100Gbps DDoS Surges
South African Internet infrastructure absorbed a sharp escalation in cyber-attacks as distributed denial-of-service incidents jumped from 10,000 attacks peaking at 300Gbps in 2025 to 22,000 incidents reaching 1,100Gbps. Telecommunications providers and managed service operators faced sudden connectivity failures on Tuesday, 19 May 2026, as high-volume traffic flooded domestic networks. The assaults disrupted consumer access to major digital services before halting abruptly mid-week.
Submarine Cable Provider Confirms High-Volume Traffic Flood
Submarine cable provider Seacom confirmed it had been hit by a high-volume DDoS attack on Tuesday, 19 May 2026. According to the company, customers utilizing dedicated DDoS protection services were not affected, while other clients faced significant outages. The malicious traffic also targeted infrastructure providers 1-Grid, Datakeepers, Diamatrix (known as Domains.co.za), and Liquid Intelligent Technologies.
Carpet-Bombing Tactics Overwhelm Johannesburg Telecommunications Provider
Founded in 2003, the wholesale Internet provider joined Host Africa and Xneelo in absorbing the floods. Network engineers face greater mitigation challenges during a carpet-bombing assault, a specific DDoS method that spreads harmful traffic across numerous network IP addresses rather than focusing on one specific target.
Did you know? Network Platforms chief technical officer Warwick Ward-Cox revealed that attacks ranged from brief 5-minute bursts to multi-day sustained assaults.
Fragmented Protocols Fuel Multi-Hour Saturation Floods
The May attacks utilized a combination of IP Fragmentation, Carpet Bombing, and DNS Amplification. Threat actors exploited core internet protocols to magnify packet volumes, targeting edge filters with rapid bursts before unleashing sustained multi-hour saturation floods. Industry telemetry showed the assaults stopped as quickly as they started, with operators reporting by Wednesday that they were no longer seeing attacks.
Frequently Asked Questions About the May 2026 Cyber Attacks
Which companies were directly impacted by the May 2026 outages?
Seacom, 1-Grid, Datakeepers, Diamatrix, Liquid Intelligent Technologies, Host Africa, Xneelo, and Network Platforms were targeted.
What technical methods did threat actors use during the infrastructure attacks?
Attackers deployed IP fragmentation, carpet-bombing across multiple IP addresses, and DNS amplification to exploit the internet’s underlying protocols.
How long did the longest recorded network assault last?
According to telemetry data from Network Platforms, the longest recorded attack exceeded 72 continuous hours.
GDP Rebasing Creates Fiscal Headroom and Lowers Debt Ratios
Fiscal headroom is generated for South Africa following a routine reassessment of economic measurement that resulted in an upward revision of the nation’s gross domestic product (GDP), Finance Minister Enoch Godongwana announced Friday evening. I can confirm that, it definitely gives us headroom,
Godongwana said in an interview on the side of a forum hosted by the Kgalema Motlanthe Foundation. Following a rebasing exercise typically carried out every five years, official figures published Thursday indicated that the country’s 2025 GDP was 5.3% greater than previously estimated. Critically, the upward revision to South Africa’s GDP will positively impact South Africa’s various fiscal ratios, including the government debt to GDP, fiscal deficit to GDP, and tax revenue as a percentage of GDP,
Kevin Lings, chief economist at Stanlib Asset Management, wrote in a note. Based on the revised GDP estimates, the gross debt ratio for the current fiscal year could fall from 78.2% to an estimated 74.5% of GDP,
said Johann Els, chief economist for PSG Financial Services, noting further that the consolidated budget deficit could fall from 3.9% to an estimated 3.7% of GDP.
A request for comment regarding how the adjustment would alter projections for South Africa’s fiscal indicators went unanswered immediately by the National Treasury. Pointing out that parts of the GDP upgrade stemmed from including illegal mining contributions—making public finance collection especially difficult—Godongwana remarked that it’s going to be a task, particularly on the informal side, a hell of a task.
Addressing infrastructure spending limitations, Godongwana further warned that the current problem on infrastructure is the ability to spend. Even now I’ve made a provision that is not likely to be spent.
Worth a look