Kenya's Cyber Threats Surge 14.45 Percent to 2.6 Billion Events in a Single Quarter

Kenya recorded 2.6 billion cyber threat events in the three months to September 2026, a 14.45 percent increase from the previous quarter, according to the Communications Authority of Kenya (CA), the state regulator overseeing the country's communications and digital infrastructure.

The quarterly tally, released in Nairobi this week, is equivalent to more than 28 million threat events per day between July and September. The 14.45 percent jump implies that detections in the preceding quarter stood at roughly 2.27 billion, meaning the latest period added more than 300 million threat events in the space of three months.

The figures appear in the Authority's quarterly sector statistics, the periodic reports through which the regulator documents malicious activity directed at Kenyan internet users, businesses and public institutions. The report covering the period to September 2026 is the latest reading in a data series the regulator uses to track the exposure of national networks.

Monitoring is anchored at the National Kenya Computer Incident Response Team Coordination Centre, hosted by the Communications Authority, which serves as the national point of contact for cybersecurity incidents. The centre issues advisories on emerging threats and coordinates responses with telecommunications operators, financial institutions and government agencies. Its work sits within the framework of the Computer Misuse and Cybercrimes Act of 2018, Kenya's principal statute on digital offences.

That law criminalises unauthorised access to computer systems, unauthorised interference with computer data and systems, cyber fraud, identity theft, phishing and the publication of false information, with convicted offenders liable to fines and imprisonment. The Communications Authority draws its wider mandate from the Kenya Information and Communications Act, under which it licenses operators and supervises the quality and security of national networks.

The detections counted in the quarterly reports span attempts to breach computer systems, interference targeting websites and online services, the distribution of malicious software and fraudulent schemes aimed at extracting money or credentials from users. Financial platforms, telecommunications networks and public digital services are recurring targets in a market where payments, government paperwork and commerce have shifted decisively online. Advisories issued by the national response centre typically urge institutions and individuals to update their systems, strengthen authentication and report incidents promptly.

Kenya's digital economy is among the most advanced in Africa. M-Pesa, the mobile money service operated by Safaricom, is one of the continent's most widely used digital payments platforms, the eCitizen portal handles applications and payments for a broad range of government services, and most internet users in the country reach the web through mobile handsets. Each of those channels, spanning payments, public services and mobile browsing, expands the surface available to attackers.

Communications regulators elsewhere in Africa have introduced comparable threat monitoring as internet penetration deepens across the continent, and the Kenyan quarterly figures illustrate how quickly attack volumes can scale in fast-digitising economies.

The next reading will come in the Authority's quarterly sector statistics for the three months to December 2026, which will show whether the upward trajectory persisted into the final quarter of the year. Further advisories from the national response centre, and any prosecutions mounted under the Computer Misuse and Cybercrimes Act, will indicate how the authorities are responding to the rising volume of detections.