Report: Nairobi, Nyanza and Eastern named top cybercrime hotspots

Nairobi has emerged as Kenya's cybercrime capital, recording the highest number of reported digital offences as authorities race to contain a growing wave of online threats targeting individuals, businesses and critical infrastructure.

A new report by the National Computer and Cybercrime Coordination Committee (NC4) paints a worrying picture of a country increasingly under siege from cybercriminals, with offences now spreading across every region.

The findings come amid heightened concern after Kenya recorded more than three billion cyberattack attempts targeting government institutions, cloud services and critical digital infrastructure in the last three months alone.

According to the report, Nairobi accounted for the largest share of reported cyber offences, underscoring the risks that come with the capital's high volume of digital transactions and concentration of public and private institutions.

Cases reported in Nairobi included intentionally withholding electronic payments delivered erroneously, unauthorised access to computer systems, computer fraud, cyber harassment, identity theft and impersonation, as well as unauthorised interference with computer systems.

“The figures show that Nairobi remains the national hotspot for cybercrime, largely reflecting its high levels of digital transactions, online activity and concentration of public and private sector institutions,” the report states.

The report also highlights how cybercrime has spread across other parts of the country, with different regions facing varying threats.

In Nyanza, cyber harassment emerged as the most common offence. Authorities also recorded cases involving identity theft and impersonation, unauthorised access to computer systems and unauthorised interference with computer systems.

The region further reported offences related to child pornography, fraudulent use of electronic data, possession of illegal devices and access codes, and intentionally withholding electronic messages delivered erroneously.

Eastern region recorded significant cases of computer fraud, cyber harassment and unauthorised access to computer systems with the intent to commit further offences.

In Rift Valley, authorities noted a decline in computer fraud compared to the same period last year. However, the region experienced a sharp rise in incidents involving intentionally withholding electronic messages delivered erroneously.

Other offences reported in the region included cyber harassment, wrongful distribution of intimate images without consent, computer fraud and unauthorised access to computer systems.

The central region reported a broad range of offences, including child pornography, computer forgery, cyber harassment, identity theft and impersonation, as well as the wrongful distribution of intimate images without consent.

At the coast, authorities mainly recorded cases involving computer fraud and cyber harassment, while the western region reported a higher prevalence of cyber harassment and unauthorised interference with computer systems.

Speaking while receiving the report, Internal Security and National Administration Principal Secretary Raymond Omollo said the findings reinforce the urgency of strengthening the country's cyber defence systems.

“The report comes at a pivotal moment following Parliament's approval of the National Cybersecurity Agency (NCSA), which will be a great support to the country in enhancing coordination, protection of critical information infrastructure and response to evolving cyber threats,” Omollo said.

The committee said it will work closely with key sectors, including banking, mobile network operators, aviation and energy, to strengthen cyber resilience and improve proactive defence mechanisms.

NC4 also revealed that it is developing a Rapid Reference Guide aimed at standardising investigations and streamlining the prosecution of cybercrime cases across the country.

The report highlights the growing challenge facing Kenya as more services move online, placing cybersecurity at the centre of protecting the country's economy, institutions and citizens.