After the Breaches of "Olla" and "Tamata": Are Iraqis' Personal Data Becoming a Testing Ground for Companies That Underinvest in Cybersecurity?
Another major incident has shaken public confidence in Iraq's digital platforms, with the latest victims being the privacy of hundreds of thousands of users. The recent security breaches involving the Olla educational platform and the Tamata shopping application were far more than isolated technical failures—they served as alarming warnings about the fragility of the digital infrastructure supporting companies that process millions of Iraqi dinars in transactions every day.
Personal information, phone numbers, and residential addresses have reportedly been exposed, and for many observers, the handling of the aftermath has been just as concerning as the breaches themselves.
The technology community is now asking a fundamental question: Who should be held accountable for such incidents? Is the problem rooted in limited software engineering capabilities and the reliance on low-cost infrastructure designed merely to keep services operational? Or does the greater responsibility lie with company management, which invests heavily in advertising and marketing campaigns while treating cybersecurity as a secondary priority rather than a core business requirement?
The reality suggests that many companies in Iraq's digital market continue to view cybersecurity as an optional expense rather than a strategic investment. Considerable resources are often directed toward improving user interfaces, expanding market reach, and increasing application downloads, while the protection of servers and critical infrastructure receives comparatively less attention.
The consequence is predictable: digital platforms that hold some of the country's largest repositories of personal data become vulnerable to cyberattacks, leaving customers to bear the consequences of inadequate security practices.
Building public trust in technology and digital transformation in Iraq has taken years of sustained effort. Yet cybersecurity incidents of this scale can erode that trust overnight. Unless companies recognize that safeguarding their digital infrastructure is far more important than billboard advertisements and promotional campaigns—and that Iraqis' personal data must be treated as a critical responsibility rather than a business afterthought—users may ultimately respond by abandoning these platforms altogether.
The Iraqi digital market has reached a stage where it can no longer afford companies that build digital empires while securing them with little more than paper-thin defenses.