Kenya stands as Africa’s second-most vulnerable nation to cyberattacks, a new Interpol report reveals. This alarming exposure leaves businesses and government agencies open to data breaches, fueling identity theft, financial fraud, and ransomware attacks that directly impact the native population. The report states Kenya accounted for 11.9 percent of all exploitable digital vulnerabilities detected across Africa in 2025, trailing only South Africa at 43.6 percent.
Interpol attributes this severe vulnerability to poor cyber practices, inadequate investment in cybersecurity, and delayed software patching across both government institutions and private companies. Hackers are exploiting internet routers running outdated firmware with known security flaws. They're also targeting unsecured virtual private networks and weaknesses in online document management platforms to gain access to sensitive data. These vulnerabilities, the report notes, were well-documented, publicly known, and easily exploitable, reflecting ongoing challenges in cyber hygiene and resource allocation.
Erosion of National Identity
Data breaches are not merely technical failures; they're enabling a wide range of cybercrimes by providing criminals with personal information. This data is then used in ransomware attacks, business email compromise, identity theft, and mobile money fraud, directly undermining the security of Kenyan citizens. Cybercriminals are exploiting leaked personal data to create AI-generated synthetic identities. These fabricated identities, combining real personal data with artificial elements, are used to open bank accounts, secure mobile loans, and register SIM cards under false names, effectively digitally dispossessing individuals of their true identities.
Kenya recorded a staggering 327 percent increase in SIM swap fraud during 2025. This surge was driven by weak identity verification controls implemented by telecommunications companies. Criminals hijacked phone numbers through psychological manipulation, known as social engineering, to gain access to victims' bank accounts and mobile money wallets. This direct assault on personal financial security hits the native working class hardest, as their savings and digital access are compromised.
The Cost of Elite Negligence
The report identifies fragmented identity verification systems and limited real-time information sharing between banks, telecommunications firms, and law enforcement agencies as key factors favoring cybercriminals. Financial institutions can detect suspicious transactions, but they lack the legal authority or technical channels to block SIM swaps or freeze accounts without court orders. This process often takes weeks to months, leaving citizens exposed. This institutional paralysis benefits transnational criminal networks.
Last month, hackers defaced President William Ruto's official website, demanding a ransom of five Bitcoin, valued at about Sh41 million. In June, the High Court found Safaricom, the country's largest telecommunications company, liable for a data breach that exposed subscribers' financial, location, and internet browsing information between 2018 and 2019. These high-profile incidents underscore a systemic failure to protect national digital infrastructure and citizen data. Hackers also claimed access to a 2.15-terabyte database containing about 17.1 million personal and medical records managed through the M-Tiba healthcare platform.
Transnational Vulnerabilities
Regional peers recorded significantly fewer vulnerabilities compared with Kenya. Tanzania ranked seventh with three percent, Uganda 22nd with 0.5 percent, and Burundi 24th with 0.3 percent. This disparity highlights Kenya's unique and severe national security challenge. The absence of an interoperable digital identity framework across Africa has worsened the problem, Interpol states. This allows criminals to steal identities in one country, open accounts in another, and launder money through a third with little risk of detection, demonstrating a clear border erasure for criminal enterprises.
Money muling is also rapidly growing, where unsuspecting individuals are recruited through fake online job advertisements. They're used as financial agents or remote transaction officers to receive and transfer illicit funds through their personal bank accounts, further entangling citizens in transnational crime. Data from the Communications Authority of Kenya shows the country recorded 2.35 billion cyber threat events in the three months to June 2026. The regulator attributed these attacks to inadequate system patching, low user awareness of phishing attacks, and the growing use of artificial intelligence by cybercriminals to launch increasingly sophisticated attacks. Web application attacks, at 10.6 million, and system attacks, at 8.4 million, were the most common threats recorded during the quarter, revealing the relentless pressure on Kenya's digital sovereignty. The people bear the cost of this managed decline in national digital security.