<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>Kenya Cyber Watch</title><link>https://pwnsy.com/tools/cyber-watch/kenya/</link><description>Sourced cyber incidents and official statements, from pwnsy Cyber Watch.</description><language>en</language><lastBuildDate>Sun, 08 Nov 2026 00:00:00 +0000</lastBuildDate><item><title>Kenya statement: The Office of the Data Protection Commissioner published a draft notice adding categories of sensitive persona</title><link>https://www.odpc.go.ke/draft-additional-categories-of-sensitive-personal-data/</link><guid isPermaLink="false">ffb435eb55368b52</guid><pubDate>Fri, 11 Sep 2026 00:00:00 +0000</pubDate><description>The Office of the Data Protection Commissioner published a draft notice adding categories of sensitive personal data under section 47 of the Data Protection Act.</description></item><item><title>Kenya National Highways Authority (KeNHA): Ransomware (Claimed)</title><link>https://pwnsy.com/tools/cyber-watch/kenya/#all</link><guid isPermaLink="false">4d16a7d4af4a5010</guid><pubDate>Sat, 25 Jul 2026 00:00:00 +0000</pubDate><description>The Deadlock ransomware group listed KeNHA on its leak site. KeNHA has not commented publicly. Sources: https://www.ransomware.live/id/S2VOSEFARGVhZGxvY2s, https://www.galaxywarden.com/blog/breach/kenha-deadlock-2026-07</description></item><item><title>State House (Presidency) website: Defacement (Confirmed)</title><link>https://pwnsy.com/tools/cyber-watch/kenya/#all</link><guid isPermaLink="false">098493ff6889e3bb</guid><pubDate>Sat, 18 Jul 2026 00:00:00 +0000</pubDate><description>ICT Cabinet Secretary William Kabogo confirmed the attack and said access to the presidential website was restricted for containment and forensics. He said there was no evidence of sensitive data being accessed or stolen. The defaced homepage showed a bitcoin wallet and demanded 5 BTC, threatening to publish information about President Ruto. Sources: https://therecord.media/kenya-probes-hack-of-presidents-website-after-ransom-demand, https://techweez.com/2026/07/18/state-house-website-hacked/</description></item><item><title>East African Gasoil: Ransomware (Claimed)</title><link>https://pwnsy.com/tools/cyber-watch/kenya/#all</link><guid isPermaLink="false">1b26996805a815b1</guid><pubDate>Mon, 06 Jul 2026 00:00:00 +0000</pubDate><description>The Arcusmedia group listed the fuel importer on its leak site. Sources: https://www.ransomware.live/id/RWFzdCBBZnJpY2FuIEdhc29pbEBhcmN1c21lZGlh</description></item><item><title>Bomu Hospital: Ransomware (Claimed)</title><link>https://pwnsy.com/tools/cyber-watch/kenya/#all</link><guid isPermaLink="false">53067e3f2324a073</guid><pubDate>Fri, 01 May 2026 00:00:00 +0000</pubDate><description>The Krybit group listed the Mombasa hospital on its leak site. Sources: https://www.ransomware.live/id/Ym9tdWhvc3BpdGFsLm9yZ0BrcnliaXQ</description></item><item><title>IFMIS, National Treasury: Data leak (Claimed)</title><link>https://pwnsy.com/tools/cyber-watch/kenya/#all</link><guid isPermaLink="false">1fa82717ab5e92c4</guid><pubDate>Tue, 14 Apr 2026 00:00:00 +0000</pubDate><description>The Bashe group, also tracked as APT73, listed the Treasury&#x27;s financial management system ifmis.go.ke on its leak site. Leak size is unknown. Sources: https://www.breachsense.com/breaches/ifmis-kenya-data-breach/, https://www.ransomware.live/id/aWZtaXMuZ28ua2VAYXB0NzM</description></item><item><title>Wells Fargo Kenya (courier and security): Ransomware (Claimed)</title><link>https://pwnsy.com/tools/cyber-watch/kenya/#all</link><guid isPermaLink="false">1a3214e2374900cf</guid><pubDate>Fri, 06 Feb 2026 00:00:00 +0000</pubDate><description>The Gentlemen ransomware group listed fargo.co.ke on its leak site. Sources: https://www.ransomware.live/id/V2VsbHMgRmFyZ29AdGhlZ2VudGxlbWVu</description></item><item><title>National Mining Corporation (NAMICO): Ransomware (Claimed)</title><link>https://pwnsy.com/tools/cyber-watch/kenya/#all</link><guid isPermaLink="false">56aaa808e53b84e2</guid><pubDate>Mon, 26 Jan 2026 00:00:00 +0000</pubDate><description>The Tengu group listed the state mining corporation on its leak site. Sources: https://www.ransomware.live/id/bmFtaWNvLmdvLmtlQHRlbmd1</description></item></channel></rss>
