2026 Regional Threat Intelligence Report

East Africa Cyber Threat Intelligence 2026

The cross-border edition. Version 4.0, covering January 2025 to August 2026 — drawn entirely from open sources, with every figure reported as a floor rather than a measurement.

327%

Rise in Kenyan SIM-swap fraud, 2025

USD 3.4m

Taken from Equity Bank Rwanda in five days

USD 484m

African cybercrime losses in 2025

1.2%

Of Ugandan cybercrime losses recovered

What's Inside

A cross-border fraud model, demonstrated

How roughly USD 3.4 million left Equity Bank Rwanda in five days, executed across Kigali and Kampala — and why any group on a shared core platform inherits it.

Liability has moved

A June 2026 High Court ruling split one customer’s SIM-swap loss 60:40 between a telecom operator and a bank. A correct PIN was rejected as a defence.

Critical infrastructure is in scope

The UETCL grid compromise, and a leak-site pattern showing deliberate reconnaissance of power, water, pensions and mining.

Country assessments and the new regulatory clocks

Kenya, Ethiopia, Uganda, Tanzania, Rwanda and Somalia — including Ethiopia’s 48-hour incident reporting regime, the strictest in the region.

“In most markets, compromising a phone number gets an attacker into an account. In East Africa, it gets them into the economy.”

— Strategic context, p. 6

Ready to read the full report?

41 pages · Full data, case studies and defensive guidance.

Compiled by the Seraph Threat Intelligence Team from open-source reporting

Download Full Report

Unlock this report

Get your copy of the report

Tell us a little about yourself and we'll unlock East Africa Cyber Threat Intelligence 2026 — case studies, data and the full breakdown.

By submitting, you agree to receive occasional threat intelligence updates from Seraph Cyber. Unsubscribe anytime.