NAIROBI, Kenya –Kenya experienced more than three billion cyberattack attempts over the past three months, exposing vulnerabilities in government systems, cloud services and critical digital infrastructure, according to a new report by the National Computer and Cybercrime Coordination Committee (NC4).
The report, released on Monday, paints a worrying picture of the country’s cybersecurity landscape, citing a rise in cybercrime cases ranging from digital payment fraud and identity theft to unauthorised access to computer systems and online harassment.
NC4 said the attacks targeted different sectors of the economy, including government institutions and online platforms, highlighting the growing sophistication of cybercriminals operating in the country.
Speaking while receiving the report, Raymond Omollo, who chairs the committee, said the findings come at a crucial time following Parliament’s approval of the National Cybersecurity Agency.
According to Omollo, the new agency is expected to strengthen coordination, enhance protection of critical information infrastructure and improve the country’s ability to respond to emerging cyber threats.
The report identified Nairobi as the country’s cybercrime hotspot, recording the highest number of reported offences due to its concentration of digital transactions, online activity and public and private sector institutions.
Among the most common offences reported in the capital were intentionally withholding electronic payments delivered in error, unauthorised access to computer systems, computer fraud, cyber harassment, identity theft and impersonation.
Outside Nairobi, the report found varying cybercrime patterns across different regions.
In Nyanza, cyber harassment emerged as the most frequently reported offence, alongside cases involving identity theft, unauthorised access to computer systems and interference with digital platforms.
Authorities also recorded incidents involving child pornography, fraudulent use of electronic data and possession of illegal devices and access codes.
Eastern Kenya reported high numbers of computer fraud, cyber harassment and unauthorised access to computer systems with the intent to commit further offences.
While Rift Valley recorded a decline in computer fraud cases compared to the previous year, investigators noted a significant increase in incidents involving the intentional withholding of electronic messages delivered erroneously.
The region also reported cases of cyber harassment and the non-consensual distribution of intimate images.
In Central Kenya, cyber offences were spread across multiple categories, including computer forgery, child pornography, cyber harassment, identity theft and the wrongful distribution of intimate images.
The Coast region recorded cases largely linked to computer fraud and cyber harassment, while cyber harassment and unauthorised interference with computer systems were the dominant offences in Western Kenya.
In response to the growing threat, the committee resolved to strengthen engagement with critical sectors, including banking, telecommunications, aviation and energy, to enhance cybersecurity preparedness and resilience.
NC4 also announced plans to develop a Rapid Reference Guide aimed at standardising investigations and prosecutions of cybercrime cases across the country.
The briefing was attended by NC4 Director James Kimuyu, Data Commissioner Immaculate Kassait, and representatives from key agencies, including the Communications Authority of Kenya, Directorate of Criminal Investigations, Kenya Defence Forces, National Intelligence Service, Central Bank of Kenya and Office of the Director of Public Prosecutions.
