MEO Hit by Mass Cyberattack, Services Disrupted but Customer Data Secure
On September 15, 2026, Portuguese telecommunications provider MEO disclosed it had been targeted by a "mass attack" that caused service disruptions and international network congestion. The company confirmed the incident in a statement to Lusa, emphasizing that mitigation measures were swiftly deployed, restoring stability without any customer data breach.
According to MEO, the attack did not result in unauthorized access to internal systems or customer information. While the operator did not specify the nature of the attack, third-party outage tracker Downdetector recorded widespread service issues affecting MEO, Vodafone, NOS, and Digi during the same period.
MEO reiterated its commitment to infrastructure security and resilience, though the full scope of the attack and its origin remain undisclosed. The incident highlights the ongoing vulnerability of telecom networks to large-scale disruptions.
Source: https://www.theportugalnews.com/news/2026-09-15/meo-hit-by-cyberattack/1086462
MEO TPRM report: https://www.rankiteo.com/company/meo
"id": "meo1789490041",
"linkid": "meo",
"type": "Cyber Attack",
"date": "9/2026",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Telecommunications',
'location': 'Portugal',
'name': 'MEO',
'type': 'Telecommunications provider'},
{'industry': 'Telecommunications',
'location': 'Portugal',
'name': 'Vodafone',
'type': 'Telecommunications provider'},
{'industry': 'Telecommunications',
'location': 'Portugal',
'name': 'NOS',
'type': 'Telecommunications provider'},
{'industry': 'Telecommunications',
'location': 'Portugal',
'name': 'Digi',
'type': 'Telecommunications provider'}],
'data_breach': {'data_exfiltration': 'None',
'personally_identifiable_information': 'None'},
'date_detected': '2026-09-15',
'date_publicly_disclosed': '2026-09-15',
'description': 'Portuguese telecommunications provider MEO disclosed it had '
"been targeted by a 'mass attack' that caused service "
'disruptions and international network congestion. The company '
'confirmed that mitigation measures were swiftly deployed, '
'restoring stability without any customer data breach. The '
'attack did not result in unauthorized access to internal '
'systems or customer information.',
'impact': {'data_compromised': 'None',
'identity_theft_risk': 'None',
'operational_impact': 'Service disruptions, international network '
'congestion',
'payment_information_risk': 'None',
'systems_affected': 'Telecommunications services, international '
'network'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Lusa'}, {'source': 'Downdetector'}],
'response': {'communication_strategy': 'Public statement to Lusa',
'containment_measures': 'Mitigation measures swiftly deployed',
'incident_response_plan_activated': 'Yes',
'recovery_measures': 'Restored stability'},
'title': 'MEO Hit by Mass Cyberattack, Services Disrupted but Customer Data '
'Secure',
'type': 'Cyberattack'}