Skip to content
Pinned Category

Kenyan Financial Institutions Lost Over Ksh 5.6 Billion To Cybercrime, Calling For The Need For Enhanced Cybersecurity In The Country’s Banking Sector

BY Steve Biko Wafula · March 24, 2023 12:03 pm

KEY POINTS

In 2020, the Equity Bank reported that it had lost KES 1.3 billion ($13 million) to a cyber attack. The bank did not disclose the details of the attack, but it was reported that the attackers used phishing emails to access the bank's system and transfer the money to various accounts.

KEY TAKEAWAYS

NBK lost KES 29 million ($280,000), the KRA lost KES 4 billion ($40 million), the CBA lost KES 90 million ($900,000), the Cooperative Bank of Kenya lost KES 157 million ($1.57 million), and the Equity Bank lost KES 1.3 billion ($13 million).

Kenyan financial institutions have lost millions of dollars to cybercrime over the past few years. Some of the most significant cyberattacks have targeted banks such as the National Bank of Kenya, the Kenya Revenue Authority, the Commercial Bank of Africa, the Cooperative Bank of Kenya, and the Equity Bank.

The attacks have involved sophisticated techniques such as phishing emails, social engineering, malware, and ATM malware.

The financial losses resulting from these attacks range from hundreds of thousands to millions of dollars. For example, the NBK lost KES 29 million ($280,000), the KRA lost KES 4 billion ($40 million), the CBA lost KES 90 million ($900,000), the Cooperative Bank of Kenya lost KES 157 million ($1.57 million), and the Equity Bank lost KES 1.3 billion ($13 million).

These losses are significant and highlight the need for financial institutions in Kenya to prioritize cybersecurity to prevent further financial losses and protect customer data.

Over the past few years, cybercrime has become a major concern for Kenyan banks. The country has seen an increase in cyberattacks targeting financial institutions, leading to significant financial losses. In this article, we will look at some examples of cybercrime in Kenyan banks, the amount of money lost, and what is being done to ensure cybersecurity is a top priority.

One of the most significant cyber-attacks in Kenya was the one that targeted the National Bank of Kenya (NBK) in 2017. In this attack, the hackers managed to steal KES 29 million ($280,000) from the bank’s system. The attackers used sophisticated techniques, such as phishing emails, to access the bank’s system and transfer the money to various accounts.

In 2018, the Kenya Revenue Authority (KRA) reported that it had lost KES 4 billion ($40 million) to a cyber attack. The attackers used malware known as WannaCry to infiltrate the authority’s system and steal sensitive information. The KRA had to shut down its system to prevent further damage, leading to significant financial losses.

In 2019, the Commercial Bank of Africa (CBA) reported that it had lost KES 90 million ($900,000) to a cyber attack. The bank did not disclose the details of the attack, but it was reported that the attackers used malware known as ATM malware to steal money from the bank’s ATMs.

In the same year, the Cooperative Bank of Kenya reported that it had lost KES 157 million ($1.57 million) to a cyber attack. The bank reported that the attackers used social engineering techniques to gain access to the bank’s system and transfer the money to various accounts.

In 2020, the Equity Bank reported that it had lost KES 1.3 billion ($13 million) to a cyber attack. The bank did not disclo