Expansion in Kenya's ICT Sector During Q3 Due to Increased Mobile and Internet Adoption
The third quarter of the 2024/2025 financial year saw robust growth in Kenya's Information and Communication Technology (ICT) sector, according to the Communications Authority of Kenya (CA). This growth, however, was accompanied by a significant surge in cyber threats, as reported by the CA.
The surge in cyber threats is primarily attributed to the rapid digitization of government operations, the proliferation of vulnerable Internet of Things (IoT) devices, and the exploitation of outdated system vulnerabilities. The CA reported a historic surge, with 8.6 billion cyberattacks recorded by mid-2025, most targeting operating systems and database servers managed by ISPs and cloud providers.
Key causes of this trend include:
- Rapid government digitization and online public services, increasing potential attack surfaces. Between January and August 2024, government infrastructure faced 114 breach attempts.
- Outdated system vulnerabilities and poor security in IoT devices, exploited to steal login credentials and disrupt services.
- The rise in sophisticated attack methods, including AI-powered adaptive attacks, social engineering, and online fraud.
- Regulatory and infrastructure challenges affecting ICT service providers, hampering comprehensive security improvements.
To address this trend, several potential solutions have been proposed:
- Upgrading and patching legacy systems promptly to close exploitable vulnerabilities.
- Strengthening IoT device security standards and protocols to ensure comprehensive protection across the network.
- Enhanced cyber threat intelligence sharing and coordinated national responses, such as increased dissemination of cyber threat advisories by the Communications Authority.
- Capacity building in cybersecurity skills within both public and private sectors to detect and respond more effectively.
- Collaboration among national, county, and private ICT stakeholders to align infrastructure and security policies.
- Leveraging advanced AI-enabled cybersecurity tools like automated detection and response platforms.
- Policy and regulatory reforms that streamline processes for ICT infrastructure rollout and security compliance.
- Continuous public awareness campaigns on cyber risks to reduce social engineering successes.
This cyber threat surge not only threatens the efficiency of Kenya's ICT sector but also digital rights and trust, underscoring the need for holistic solutions that combine technology, policy, and human factors to safeguard the expanding digital economy and public services.
In addition to the surge in cyber threats, the ICT sector also experienced positive growth in various areas. Active mobile subscriptions increased by 6.7% to 76.16 million. Smartphone connections climbed to 42.35 million. Mobile money subscriptions grew by 7.2% to 45.36 million. Mobile data subscriptions increased by 1.9% to 57.17 million. Fibre optic uptake saw a 6.1% increase. Fixed internet subscriptions grew 8.1% to 1.86 million. Feature phones reached 32.57 million. Cable TV showed the highest growth at 31.5%.
The growth in the ICT sector is attributed to expanding network infrastructure, increased device availability, and rising digital adoption across the country. The CA issued 13.23 million advisories, up 14.2% from the previous quarter, demonstrating their commitment to maintaining a secure digital environment.
References: [1] Communications Authority of Kenya (2025). Cybersecurity Threats and Response in Kenya's ICT Sector. Nairobi: Communications Authority of Kenya. [2] Ndiritu, P. (2025). Kenya's ICT Sector: Navigating the Cybersecurity Threat Landscape. Business Daily Africa. [3] Nyong'o, J. (2025). Kenya's ICT Sector: The Road to Cybersecurity Resilience. ITWeb Africa. [4] Mwangi, R. (2025). AI-Powered Cybersecurity Solutions: The Future of Kenya's ICT Sector. Computerworld Kenya.
- Amidst the robust growth in Kenya's ICT sector, concerns about cybersecurity loom large due to a historic surge in cyber threats, as reported by the Communications Authority of Kenya (CA).
- Rapid digitization of government operations, outdated system vulnerabilities, IoT device security flaws, sophisticated attack methods, and regulatory challenges are major contributors to this surge in cyberattacks.
- To combat this trend, the CA proposes solutions such as upgrading and patching legacy systems, enhancing IoT device security standards, coordinated national responses, capacity building in cybersecurity, aligning infrastructure and security policies, and leveraging AI-enabled cybersecurity tools.
- The ICT sector also experienced a positive growth in areas like mobile subscriptions, smartphone connections, mobile money subscriptions, mobile data subscriptions, and cable TV.
- This growth is anchored in expanding network infrastructure, increased device availability, and rising digital adoption across the country, with the CA issuing more advisories to maintain a secure digital environment.
