As we mark Cybersecurity Awareness Month, it is worth reflecting on one of East Africa’s greatest success stories: its rapid digital transformation.
Across the region, governments, businesses, and citizens have embraced digital innovation at an unprecedented pace, unlocking new opportunities for economic growth, financial inclusion, and societal advancement. In few places is this more evident than in Kenya, where mobile money has become a global benchmark for digital innovation and a cornerstone of daily economic activity.
However, digital growth and cyber risk are advancing hand in hand.
The same technologies that power economic progress are increasingly attracting cybercriminals looking to exploit digital identities, mobile payment platforms, critical infrastructure, and emerging AI technologies. Today, cybersecurity is no longer simply an IT challenge. It is a business, economic, and societal imperative.
Recent threat intelligence illustrates the scale of the challenge. According to the INTERPOL African Cyberthreat Assessment Report 2026, Kenya recorded more than 46,000 Distributed Denial-of-Service (DDoS) attacks during the first half of 2025, with telecommunications infrastructure among the most targeted sectors. Kenya also ranked among Africa’s leading locations for phishing detections, while hundreds of millions of intrusion attempts targeted government and ICT infrastructure.
What makes East Africa’s threat landscape distinctive is that it increasingly reflects the region’s rapid digital transformation. Unlike markets where malware remains the dominant concern, East Africa is seeing increasing attacks against digital identities, mobile money ecosystems, and critical services.
One clear example is the rapid rise of SIM-swap fraud. The INTERPOL Report also showed a 327% increase in SIM-swap fraud in Kenya during 2025, resulting in more than 123,000 fraudulent SIMs and an estimated US$3.8 million in losses. These attacks highlight a growing reality: alongside securing devices and networks, organizations must increasingly focus on protecting digital identities.
In today’s digital economy, a mobile phone number often serves as a person’s gateway to banking, payments, e-commerce platforms, and online services. When cybercriminals gain control of that identity, they can gain access to a significant portion of an individual’s digital life. As East Africa continues expanding financial inclusion through digital channels, safeguarding digital identities must become a priority for both organizations and consumers.
Compounding this challenge is the rise of artificial intelligence.
AI is transforming industries by improving productivity, accelerating innovation, and enabling new business models. At the same time, it is becoming a powerful tool for cybercriminals. AI-powered phishing attacks, fraudulent messages, deepfakes, and highly personalized scams are making cybercrime more convincing, scalable, and difficult to detect.
The result is a threat landscape where attackers can operate with greater speed and precision than ever before. Messages that once contained obvious warning signs can now closely resemble legitimate communications from trusted organizations, colleagues, or service providers.
Beyond financial fraud, critical infrastructure is also becoming a growing target. The cybersecurity incident affecting Uganda’s electricity utility in 2025 highlighted the potential impact cyber disruptions can have on essential services, disrupting the systems that communities and economies depend upon every day. As governments and organizations continue modernizing telecommunications, energy, transportation, and public services, cybersecurity must be treated as a foundational component of resilience.
The encouraging news is that East Africa is taking meaningful steps in the right direction. Kenya has demonstrated leadership by advancing cybercrime legislation aimed at addressing issues such as SIM-swap fraud and scam calls. Across the region, countries including Rwanda, Uganda, Tanzania, and Ethiopia are also strengthening their cybersecurity capabilities through investments in national cybersecurity strategies, regulatory frameworks, digital resilience initiatives, and greater collaboration among Computer Emergency Response Teams (CERTs), helping to improve information sharing and coordinated responses to emerging threats.
However, governments cannot tackle these challenges alone. Organizations across every sector must view cybersecurity as a strategic business priority and focus on collaboration that involves sharing threat intelligence to improve our collective cyber resilience. Cyber resilience should be considered an investment that protects customers, supports innovation, strengthens trust, and enables long-term growth.
This requires integrating cybersecurity into digital transformation initiatives from the start, rather than treating security as an afterthought. Whether organizations are adopting cloud technologies, modernizing networks, deploying AI solutions, or expanding digital customer services, cybersecurity must be embedded into every stage of the journey.
Equally important is investing in people. While technology plays a critical role, awareness remains one of the most effective defenses against phishing, scams, and social engineering attacks. Building a culture of cyber awareness across employees, customers, and partners can significantly reduce risk and strengthen resilience.
East Africa’s digital future remains exceptionally bright. Kenya has demonstrated how technology can drive economic growth, improve financial inclusion, and create opportunities at scale. The next phase of that journey must be built on trust. The more connected our economies become, the more essential cybersecurity becomes to sustaining progress. By making cybersecurity a strategic priority today, East Africa can continue leading Africa’s digital transformation while building a safer, more resilient, and more prosperous digital future for generations to come.
Read Also: Mastercard Launches Africa Cybersecurity Center Of Excellence To Secure The Digital Future
By: Imran Chaudhrey, Country Manager, East Africa, Fortinet