KCSFA Lists 4 Details Organisations Should Report After Data Breaches

The NC4 in Kenya has outlined four key details that organizations must report after cybercrimes: information about the breach, an estimate of affected individuals, an assessment of harm risk, and reasons for denying access to breach information. An Interpol 2025 report highlights Kenya as a major target for cybercriminals, with significant attacks on mobile money platforms and telecom infrastructure. In 2025, over 46,786 DDoS attacks were recorded in the first half of the year, and more than 11.1 billion cyber threats were reported in the fiscal year ending June 2026, mainly targeting telecom systems.