~400 million people, $1.1 trillion a year in mobile-money transactions, and threat volumes now outpacing regional security maturity. Seraph's 2026 regional intelligence report breaks down what's changing across Kenya, Tanzania, Uganda, Rwanda and Ethiopia.
Why East Africa's mobile-money economy has become one of the world's most attractive — and least defended — targets, and what boards, CISOs and governments need to prioritize before 2027.
Three Tier-1 ITU nations sit above 98, while Ethiopia holds Tier 3 status despite facing the world's highest malware-targeting burden — high framework scores haven't translated into operational resilience anywhere in the region.
KSh 29.9bn (~$230m) in 2025 cybercrime losses. KURA ransomware, KenGen breach, November 2025 ministry defacements. Africa's most active private-sector SOC ecosystem.
Highest East African ITU score (99.26). TZS 4.89bn stolen via mobile/internet banking. PDPC enforcement launched April 2026. Nationwide internet shutdown around 2025 elections.
Bank of Uganda $16.8m heist (Nov 2024). First criminal conviction under the Data Protection and Privacy Act (July 2025). PDPO's Google determination established extraterritorial reach.
Acceded to the Budapest Convention in 2024. Ministry of Health 52 GB exfiltration claimed (May 2025). CyberHub trains 200 graduates a year, 30%+ women.
#1 globally for malware targeting. Telebirr faces 220+ attacks daily. INSA thwarted 27,505 attacks in H1 FY2025-26, despite holding Tier 3 ITU status.
Ordered by likely impact on enterprise and government operations across the Big 5, for 2026–2027.
Seraph CTI tracks the vulnerabilities, threat actors and campaign activity behind reports like this one, continuously.
