Tonga — Cyber Threat Profile
Tonga's Ministry of Health was hit by a ransomware attack discovered in June 2025 that crippled its National Health Information System; INC Ransom claimed the breach and officials refused a reported US$1 million ransom. Later in 2025 Tonga enacted the Cybersecurity Act 2025 and the Computer Crimes Act 2025, which establish a statutory Computer Emergency Response Team, a duty to report cybersecurity incidents and a Cybersecurity Advisory Board. Australian specialists assisted the recovery, and a 2026 US State Department exchange programme engaged a MEIDECC policy official on digital-economy security. Submarine cable dependency remains a core infrastructure risk, while phishing, social engineering and mobile fraud persist as common threats to citizens and small businesses.- Secure Internet servers per 1M people (2024): 969.5 (source: World Bank)
- Internet users (2024): 67.4% of population (source: World Bank)
Threat actors targeting Tonga
Most targeted sectors
Recent claimed incidents
Read the full analysis on IntelFusions