🛡️KENYA CYBERSECURITY INSIGHTS REPORT

Threat Landscape. Emerging Risks. What your organization must do now.

⚠️ Kenya loses an estimated KES 29.5 Billion annually to cybercrime Is your organization protected?

🔴 TOP THREATS CURRENTLY

• Phishing & Social Engineering – Top entry point targeting mobile money & email.
• Ransomware – Encrypting systems for Bitcoin; SMEs & hospitals hardest hit.
• Business Email Compromise – Invoice fraud & wire transfer scams costing millions.
• Insider Threats – 34% of breaches linked to staff negligence or malice.
• Unpatched Systems – Legacy software in banking & gov creates wide attack surfaces

🔵 MOST TARGETED SECTORS

• 🏦 Financial Services – Banks & SACCOs fraud, skimming, credential stuffing.
• 🏥 Healthcare & NGOs – Patient data and donor records are lucrative targets.
• 🏛️ Government – Citizen data & critical infrastructure under attack.
• 📦 Retail & E-Commerce – Payment fraud and fake checkout pages growing fast.
• 📱 Telcos & Fintechs – M-Pesa fraud and SIM-swap attacks on the rise.

✅ 5 ACTIONS TO TAKE TODAY

🎓 READY TO PROTECT YOUR ORGANIZATION?

Crystal Academy offers Kenya’s most practical cybersecurity training, assessments & certifications.