Devastating Phone Hacking Incident Prompts Ex-M7 Minister to Advocate for Digital Safety & Hygiene Ahead of the 2026 Elections

By Asuman Kiyingi (Senior Advocate)

As Ugandans prepare for the presidential and parliamentary polls scheduled for 15th January 2026, social media platforms have become the heartbeat of civic life. Twitter, Facebook, WhatsApp, and local community forums (bimeeza) provide real-time information, enable leader-to-citizen accountability, and serve as vital tools in the fight against corruption and abuse of office. Yet a surge in cybercriminal activity—hacking, account hijacking, and impersonation—is threatening to drown this critical democratic lifeline in fraud and fear.

At midday last Friday, 14th November 2025, as I prepared to go for my Jum’ah prayers, I experienced a shocking breach. In the middle of a conversation, my phone screen flickered, a sizzling sound erupted, an SOS red warning flashed, and the device went black despite the battery showing 57%. When I tried to restart it, the phone booted in an unfamiliar language, and all contacts, apps, and Google accounts had vanished. Within hours, the hacker used my identity to scan dozens of contacts, sending fraudulent messages promising “UK-based charity grants” of UGX 2 million to 13 million, upon paying a registration fee and providing the beneficiary’s bank details.
A Kenyan-registered number, +254 724 431 340, in the names of Rose Nyaburu, led the scammers, assisted by three other Ugandan-registered numbers:

• Joseph Sengendo – 0773 285194
• Ssali John Wasswa – 0770 552137
• Rose Nyaburu – 0769 353315

Suddenly, friends and family were flooded with calls. Strange posts appeared on my timeline, and unsuspecting people lost money and time in engagements with the scammers. This has continued up to today (Tuesday 18th November 2025) as I prepare this piece. The incident mirrors similar attacks reported across the country, which have been increasing over the years.

In February this year, the Uganda Police Force, through its spokesman Kituuma Rusoke, issued a public warning about the surge in WhatsApp hijacking incidents perpetrated by fraudsters. The Police urged the public to be vigilant and advised the adoption of several digital security measures to make it harder for scammers to take over an individual’s account.

Despite these measures, scams continue and are increasing. Reports and data from the Uganda Communications Commission confirm this. WhatsApp hijacking and mobile money fraud have become major problems as criminals now use cross-border networks to evade law enforcement.

Victims of WhatsApp account takeovers include citizens of all categories — politicians, celebrities, influencers, and traders. And the modus operandi is consistent: hackers gain access to a phone number, change the device’s language settings, lock the owner out, then use the compromised account to send fraudulent messages, request money, or spread false statements.

In some cases, hijacked accounts are weaponized to disseminate politically charged content or even distribute pornographic materials contrary to the owner’s views and values. As one cybersecurity analyst noted, “The attackers not only steal identities but also manipulate public perception, turning trusted voices into tools for misinformation.”

By flooding a trusted profile with partisan slogans or explicit content that offends the owner’s beliefs, perpetrators strip away the audience’s right to authentic communication and tarnish carefully built reputations. Victims endure anxiety, loss of credibility, and backlash from confused friends, family, and business partners.

The breach also erodes public trust in online spaces, making everyone question the safety of even the most well-secured accounts. In the words of former legislator Hon. Sarah Werere, “The government department responsible for cybersecurity and the Uganda Communications Commission have completely failed to protect us.”

This is despite the presence of a robust legal framework—namely the Data Protection and Privacy Act 2019, the Computer Misuse Act 2011 (as amended 2022), and the Electronic Signatures Act. To its credit, the Uganda Communications Commission (UCC), mandated to oversee communications and digital security, has issued public advisories from time to time. What seems to be lacking, however, is a proactive response to escalating threats and more rigorous enforcement of the law. Filed incident reports, like the one I submitted, require timely responses.

There have also been claims by some civil society groups that state agencies, especially security units, engage in unauthorized intrusions—hacking email accounts, intercepting WhatsApp communications, and even deploying spyware to monitor certain individuals, especially opposition figures. According to PFF Vice-Chairperson and Bugabula South aspiring MP Hon. Salam Musumba, “The surveillance in this country has become too much.” While no hard proof for this may be available, the pattern of arrests, searches, electronic gadget seizures, and general harassment of political opponents that usually surround digital breaches raises serious questions.

Article 27 of the Constitution enshrines the right to privacy: “No person shall be subjected to interference with that person’s home, correspondence, communication, or other property.” If proven, therefore, any unauthorized intrusion constitutes a gross violation and undermines public trust in both the state and digital platforms.

As the guardian of Uganda’s communication ecosystem, the UCC—under the able leadership of its Chairperson Hon. Nyombi Thembo—must rise to the occasion and address the emerging challenges confronting digital spaces as highlighted above. The public would certainly applaud the implementation of the following:

(a) Cybercrime taskforce – Establish and deploy a dedicated cybercrime unit to investigate all reported account hijacking within 48 hours.
(b) Public transparency – Publish a monthly report detailing the number of complaints received, actions taken, and outcomes.
(c) Judicial oversight – Ensure that any state-directed surveillance strictly adheres to the law, with warrants issued only by a judge.
(d) Citizen empowerment – Launch a nationwide awareness campaign on two-factor authentication (2FA), device-lock settings, and phishing red flags.
(e) Platform cooperation – Push social media companies to tighten verification for high-risk accounts and expedite takedown requests.

Lastly, a call to all stakeholders. The digital public sphere is public property that belongs to every Ugandan. Protecting it is therefore not a partisan issue. It is indispensable in building a democratic culture and society. It is also a prerequisite for free, fair, and credible elections. In Tanzania, the internet had to be switched off; otherwise, the 97% victory, murders, and secret burials of Gen Zs would have been exposed. While demanding protection and accountability from government, citizens must exercise responsibility by verifying information before sharing and reporting suspicious activity promptly. TO BE SAFE, WE MUST STAY VIGILANT.

The author is a Senior Advocate & former Minister in President Museveni’s government. (For comments on this story, get back to us on 0705579994 [WhatsApp line], 0779411734 & 041 4674611 or email us at mulengeranews@gmail.com).