Country

Ransomware attacks in Kenya

Ransomware groups have listed 27 organisations from Kenya on their leak sites since March 2023; the latest post is from 25 September 2026. Most active groups: Qilin, Devman and Krybit. Most affected sector: Government & Defense.

Total posts 27
First seen 2023-03-01
Latest post 2026-09-25
Groups 22

Ransomware victims in Kenya per year

5 2023
4 2024
9 2025
9 2026

All 27 victims

Search every post in the full table.
Victim Group Sector Discovered
Majani Insurance Brokers Vexy Ransomware Financial Services
www.eac-airports.com Krybit Transportation
KeNHA Deadlock Government & Defense
East African Gasoil Arcusmedia Energy & Utilities
bomuhospital.org Krybit Healthcare
ifmis.go.ke Apt73 Government & Defense
namico.go.ke Tengu Government & Defense
Cemtech Play Manufacturing
CPF Financial Services Thegentlemen Financial Services
National Health Insurance Management Authority Nova Healthcare
Turnkey Africa Qilin Technology
Office Of The Registrar Of Political Parties Qilin Government & Defense
Kengen Qilin Energy & Utilities
Adrian Kenya Lynx Technology
NSSF KENYA Devman Government & Defense
TBD KENYA Devman —
zetech.ac.ke Babuk2 Education
molars.co.ke Ransomhub Healthcare
zetech.ac.ke Funksec Education
Efi Sales Killsec Retail & E-Commerce
Kenya Urban Roads Authority Hunters Government & Defense
www.crezit.com Ransomhub Financial Services
Kenya Airways Ransomexx Transportation
Technical University of Mombasa Siegedsec Education
NAIVAS WAS HACKED A LARGE AMOUNT OF CONFIDENTIAL DATA HAS BEEN STOLEN Alphv Retail & E-Commerce
Kenya Bureau Of Standards Rhysida Government & Defense
Kenya Airports Authority Medusa Transportation