Ministry of Information, Communications, and the Digital
Economy CS William Kabogo/HANDOUT
The Ministry of Information, Communications, and the Digital Economy has said it has addressed a recent data breach at the Business Registration Service (BRS).
Cabinet Secretary William Kabogo said “the matter has been comprehensively addressed and conclusively resolved.”
“The Ministry confirms that the unauthorised publication of information has been fully removed and permanently erased,” he said.
Additionally, the CS assured that all Business Registration Service systems and databases have been secured, with enhanced preventive measures implemented to mitigate any future occurrences.
“We assure the public that stringent cybersecurity safeguards have been reinforced across all government digital infrastructure assets to protect the confidentiality and privacy of Kenyans' personal data, in accordance with the Constitution of Kenya, 2010 and other relevant legislations,” he said.
The cyberattack, believed to have occurred on the night of January 31, raised serious concerns over data security.
Kabogo had re-assured citizens that the multi-agency security team, in collaboration with international cyber-security agencies responsible for overseeing cyberspace governance were dealing with the matter to mitigate the issue efficiently and effectively.
He assured Kenyans and all other stakeholders that the security and integrity of all government and digital assets is a top priority concern for the government.
Noting that cybersecurity is a shared responsibility by all stakeholders, the CS encouraged the public to adopt strict cyber-security measures that include ensuring their devices have the latest security updates and anti-virus software installed.
BRS Director General Kenneth Gathuma promised on Sunday that investigations were underway.
“Our cybersecurity experts are working closely with our cybersecurity partner, law enforcement, and investigative agencies to assess the scope of the incident, determine any potential impact, and implement necessary containment and mitigation measures,” Gathuma said.
“As a precautionary measure, we have strengthened our security protocols to safeguard our systems and prevent future incidents. The Business Registration Service remains fully committed to addressing this matter with transparency and diligence.”
BRS holds critical data on all registered businesses, including company names, directors’ and shareholders’ details, business activities, physical addresses, contact information, and registration dates.
