KenGen listed by the Qilin ransomware group

Overview

The Qilin ransomware group has listed KenGen (Kenya Electricity Generating Company), the largest electric power producer in Kenya, on its leak site. The government enterprise generates electricity for the country and the East Africa region. The listing appeared on 9 July 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated data from the power producer. The archive is expected to include operational records, infrastructure data and employee information.

Risks for affected individuals

• Employees' personal records may be exposed.
• Operational and infrastructure data could be sensitive.
• Corporate information may be misused.

What remains unknown

• The volume of data exfiltrated.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

The company should coordinate with Kenyan cybersecurity authorities, review affected systems, and inform staff. Employees should be alert to phishing referencing the power sector.