The Communications Authority (CA) reports that 860 million cyberattacks have been registered against Kenya this year, the most ever.

According to CA, cyber-threats against Kenya's critical information infrastructure (CIIs) have increased in "the frequency, sophistication, and scale" in 2023.

"In the last 12 months alone, the attacks have skyrocketed to a new high of 860 million cyber-attacks. Of these attacks, 79% were a result of cyber criminals exploiting flaws and vulnerabilities in organizations' internal controls, system procedures and information systems, which they used to gain unauthorized access to the computer systems," the authority says in a new statement.


According to CA, the number of cyberattacks in the nation was 7.7 million yearly compared to six years ago.

"Malicious software accounted for 14% of the attacks, while Distributed Denial of Services (DDoS) accounted for 6.5%, followed by attacks targeted at web applications," the communications regulator said.

According to CA, Kenya is one of Africa's top three most targeted nations, after South Africa and Nigeria.

In July, a high-profile cyberattack on Kenya's eCitizen platform paralyzed access to more than 5,000 government services provided by ministries, county governments, and agencies.


The hackers behind the attack claimed to be from Anonymous Sudan.

However, ICT Cabinet Secretary (CS) Eliud Owalo said that no data was lost due to the hack.

According to a report released in January 2023 by the communications regulator, financial services, healthcare, education, energy, utilities, and government organizations are the industries in Kenya that cyber attackers target the most.