Kenya records over 3 billion cyber-attack attempts in three months - Report

Kenya recorded more than three billion cyberattack attempts targeting digital infrastructure, cloud services and government institutions in the last three months, a new report by the National Computer and Cybercrime Coordination Committee (NC4) has revealed.

The committee said the attacks exploited vulnerabilities across different systems, underscoring the growing threat posed by cybercriminals as the country becomes increasingly reliant on digital platforms.

According to the latest cybercrime status report, the country is also experiencing a rise in offences linked to digital payments, unauthorised access to computer systems, identity theft, cyber harassment, fraud and false publication.

NC4, which coordinates efforts to protect the country's digital infrastructure and combat cybercrime, warned that the evolving nature of cyber threats requires stronger collaboration between government agencies and critical sectors of the economy.

The report identified Nairobi as the region with the highest number of reported cybercrime cases, followed by Nyanza, Eastern, Rift Valley, Central, Coast and Western regions.

While receiving the report, Principal Secretary for Internal Security and National Administration Raymond Omollo said the findings come at a critical time following Parliament’s approval of the National Cybersecurity Agency (NCSA).

“The report comes at a pivotal moment following Parliament's approval of the National Cybersecurity Agency, which will be a great support to the country in enhancing coordination, protection of critical information infrastructure and response to evolving cyber threats,” Omollo said.

According to the report, Nairobi recorded the highest incidences of intentionally withholding electronic payments delivered erroneously, unauthorised access to computer systems, computer fraud and cyber harassment.

The capital also registered cases involving identity theft, impersonation and unauthorised interference with computer systems.

NC4 attributed Nairobi’s dominance in cybercrime statistics to the concentration of public and private institutions, high internet penetration and the large volume of digital transactions conducted in the city.

In the Nyanza region, cyber harassment emerged as the most common offence. Other reported crimes included identity theft and impersonation, unauthorised access to computer systems and interference with digital systems.

The region also recorded cases involving child pornography, fraudulent use of electronic data, possession of illegal devices and access codes, as well as the withholding of electronic messages delivered in error.

The eastern region recorded significant cases of computer fraud, cyber harassment and unauthorised access to computer systems with intent to commit further offences.

In Rift Valley, the report noted a decline in computer fraud compared to the same period last year. However, there was a marked increase in cases involving the intentional withholding of electronic messages delivered erroneously.

The region also reported cyber harassment, wrongful distribution of intimate images without consent and unauthorised access to computer systems.

Central region registered a mix of offences, including child pornography, computer forgery, identity theft, impersonation, cyber harassment and the distribution of intimate images without consent.

At the coast, authorities reported cases of computer fraud and cyber harassment, while the western region recorded high incidences of cyber harassment and unauthorised interference with computer systems.

The committee said it will engage key sectors, including banking, mobile network operators, aviation and energy providers, to strengthen cyber defences and improve resilience against attacks.

NC4 also disclosed that it is developing a Rapid Reference Guide aimed at standardising and streamlining the investigation and prosecution of cybercrime cases across the country.