NSSF KENYA listed by the devman ransomware group

Overview

The Devman ransomware group listed the National Social Security Fund (NSSF) of Kenya on its leak site on 19 May 2025. A ransom demand of 4.5 million USD was associated with the incident.

What was published

The listing referenced the fund as a victim with a ransom demand. No detailed public inventory of the data was provided.

Risks for affected individuals

A national social security fund holds the personal and contribution records of millions of workers. Exposure could enable identity theft and fraud at scale.

What remains unknown

The number of affected records and the exact data categories are not disclosed.

What affected people should do

Members should monitor for identity misuse, be alert to phishing referencing NSSF and verify communications through official channels.