Kenya recorded more than three billion cyberattack attempts targeting government systems, businesses and critical digital infrastructure in the three months to June, highlighting the growing cybersecurity risks facing one of Africa’s fastest-growing digital economies.
A new report by the National Computer and Cybercrime Coordination Committee (NC4) shows that cybercriminals are increasingly targeting organisations through computer fraud, unauthorised system access, identity theft, cyber harassment and other forms of digital crime.
The findings underscore the mounting challenge facing businesses, financial institutions and public agencies as Kenya accelerates its digital transformation agenda.
The report was presented to Principal Secretary for Internal Security and National Administration Dr Raymond Omollo, who chairs the NC4.
According to the report, Nairobi accounted for the highest number of cybercrime cases, reflecting the city’s status as the country’s commercial and technological hub. Common offences reported included computer fraud, identity theft, unauthorised access to computer systems, cyber harassment and the illegal withholding of electronic payments transferred in error.
The concentration of cybercrime in Nairobi raises concerns for businesses increasingly reliant on digital platforms, mobile payments and cloud-based systems to conduct operations.
Beyond the capital, cybercrime incidents were reported across all regions of the country, with Nyanza, Eastern, Rift Valley, Central, Coast and Western regions recording a range of offences including impersonation, computer fraud, cyber harassment and unauthorised interference with computer systems.
The report comes at a time when Kenya is positioning itself as a regional technology and innovation hub, with growing investments in digital financial services, e-commerce, data centres and online government services.
Dr Omollo said the findings coincide with Parliament’s approval of the National Cybersecurity Agency (NCSA), which is expected to strengthen the country’s cyber resilience and enhance the protection of critical information infrastructure.
The establishment of the agency is seen as a key milestone in Kenya’s efforts to secure its digital economy against increasingly sophisticated cyber threats.
Industry experts have warned that cybercrime poses significant financial and reputational risks for organisations, particularly as businesses continue to digitise operations and migrate critical systems online.
The NC4 report highlights a broad range of offences affecting different regions of the country. In Nyanza, cyber harassment and identity theft were among the most commonly reported crimes, alongside unauthorised access to computer systems and digital infrastructure.
Eastern Kenya recorded high levels of computer fraud and cyber harassment, while Rift Valley experienced an increase in cases involving electronic payment disputes and unauthorised system access.
Central Kenya reported cases involving computer forgery, identity theft, cyber harassment and the non-consensual distribution of intimate images. At the Coast, computer fraud emerged as a major concern, while Western Kenya reported significant incidents involving cyber harassment and interference with computer systems.
In response to the growing threat landscape, the committee resolved to strengthen collaboration with key sectors including banking, telecommunications, aviation and energy—industries considered critical to national economic stability.
The committee is also developing a Rapid Reference Guide to support the standardisation of cybercrime investigations and prosecutions across the country.
The report’s findings reinforce the need for businesses to invest in stronger cybersecurity frameworks, employee awareness programmes and incident response capabilities as cyber threats continue to evolve.
With digital transactions, online services and connected infrastructure becoming increasingly central to economic activity, experts warn that cybersecurity can no longer be viewed solely as an IT issue but as a core business risk requiring boardroom attention.
The meeting was attended by representatives from key institutions including the Office of the Data Protection Commissioner, Communications Authority of Kenya, Directorate of Criminal Investigations, Central Bank of Kenya, Kenya Defence Forces, National Intelligence Service, Office of the Director of Public Prosecutions and eCitizen.
As Kenya deepens its digital economy ambitions, the report serves as a reminder that protecting data, systems and digital infrastructure will be critical to sustaining investor confidence and supporting long-term economic growth.
Read:Â Parliament Approves Creation of National Cybersecurity Agency
>>> The Invisible Threat: Why Cloud Phones Are Cybercriminals’ Favourite New Weapon
Leave a comment