Kenya — Cyber Threat Profile
Known as Africa's "Silicon Savannah," Kenya prioritizes protecting its mobile money ecosystem, notably M-Pesa. The Office of the Data Protection Commissioner (ODPC) is actively enforcing compliance with the Data Protection Act, issuing substantial fines for unauthorized data sharing. The National Computer and Cybercrimes Coordination Committee (NC4) is focusing on hardening critical national infrastructure, including the power grid and digital tax systems. Kenya has successfully integrated cybersecurity into its primary education curriculum and is developing a "Sovereign Cloud" to house sensitive government data. The strategy seeks to balance rapid fintech innovation with robust, citizen-centric data privacy and national infrastructure resilience.- National CERT/CSIRT: National KE-CIRT/CC
- Data protection authority: Office of Information Commissioner (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 0.31 / 100, #63 worldwide
- Secure Internet servers per 1M people (2024): 399.7 (source: World Bank)
- Internet users (2024): 35.0% of population (source: World Bank)
Threat actors targeting Kenya
- Anonymous Sudan Hacktivist
- APT38 APT
- Flax Typhoon APT
- LockBit Ransomware
- Qilin Ransomware · 3 incident(s)
- APT73 Ransomware · 1 incident(s)
- Arcus Media Ransomware · 1 incident(s)
- Deadlock Ransomware · 1 incident(s)
- FunkSec Ransomware · 1 incident(s)
- Hunters International Ransomware · 1 incident(s)
- KillSec Ransomware · 1 incident(s)
- Krybit Ransomware · 1 incident(s)
- Lynx Ransomware Ransomware · 1 incident(s)
- Play Ransomware Ransomware · 1 incident(s)
- RansomHub Ransomware · 1 incident(s)
- The Gentlemen Ransomware
- Transparent Tribe APT
Most targeted sectors
- Government & Public Sector 4 incident(s)
- Energy & Utilities 2 incident(s)
- Healthcare 2 incident(s)
- Technology 2 incident(s)
- Education & Research 1 incident(s)
- Manufacturing 1 incident(s)
- Telecommunications 1 incident(s)
Recent claimed incidents
- KeNHA 2026-07-25 · Government & Defense
- East African Gasoil 2026-07-06 · Energy
- Bomu Hospital 2026-05-01 · Healthcare
- Integrated Financial Management Information System (IFMIS) 2026-04-27 · Public Sector
- Cemtech 2026-01-21
- Turnkey Africa 2025-10-15 · Technology
- Office Of The Registrar Of Political Parties 2025-09-14 · Public Sector
- Kengen 2025-08-06 · Energy
- Adrian Kenya 2025-07-15 · Telecommunication
- molars.co.ke 2025-01-06 · Healthcare
- Zetech University 2024-12-14 · Education
- Efi Sales 2024-11-24
- Kenya Urban Roads Authority 2024-07-13 · Government