Country

Ransomware attacks in Kenya

Ransomware groups have listed 25 organisations from Kenya on their leak sites since March 2023; the latest post is from 25 July 2026. Most active groups: Qilin, Devman and Ransomhub. Most affected sector: Government & Defense.

Total posts 25
First seen 2023-03-01
Latest post 2026-07-25
Groups 21

Most active groups

  1. Qilin 3
  2. Devman 2
  3. Ransomhub 2
  4. Alphv 1
  5. Apt73 1
  6. Arcusmedia 1
  7. Babuk2 1
  8. Deadlock 1
  9. Funksec 1
  10. Hunters 1
All groups →

Most targeted sectors

  1. Government & Defense 7
  2. Education 3
  3. Healthcare 3
  4. Energy & Utilities 2
  5. Financial Services 2
  6. Retail & E-Commerce 2
  7. Technology 2
  8. Transportation 2
  9. Manufacturing 1
All sectors →

Ransomware victims in Kenya per year

5 2023
4 2024
9 2025
7 2026

All 25 victims

Search every post in the full table.
Victim Group Sector Discovered
KeNHA Deadlock Government & Defense
East African Gasoil Arcusmedia Energy & Utilities
bomuhospital.org Krybit Healthcare
ifmis.go.ke Apt73 Government & Defense
namico.go.ke Tengu Government & Defense
Cemtech Play Manufacturing
CPF Financial Services Thegentlemen Financial Services
National Health Insurance Management Authority Nova Healthcare
Turnkey Africa Qilin Technology
Office Of The Registrar Of Political Parties Qilin Government & Defense
Kengen Qilin Energy & Utilities
Adrian Kenya Lynx Technology
NSSF KENYA Devman Government & Defense
TBD KENYA Devman —
zetech.ac.ke Babuk2 Education
molars.co.ke Ransomhub Healthcare
zetech.ac.ke Funksec Education
Efi Sales Killsec Retail & E-Commerce
Kenya Urban Roads Authority Hunters Government & Defense
www.crezit.com Ransomhub Financial Services
Kenya Airways Ransomexx Transportation
Technical University of Mombasa Siegedsec Education
NAIVAS WAS HACKED A LARGE AMOUNT OF CONFIDENTIAL DATA HAS BEEN STOLEN Alphv Retail & E-Commerce
Kenya Bureau Of Standards Rhysida Government & Defense
Kenya Airports Authority Medusa Transportation