Kenya’s ODPC confirms investigation into alleged M-Tiba data leak
The Office of the Data Protection Commissioner (ODPC) has officially broken its silence regarding the massive alleged data breach involving the mobile..
✨ Key Highlights
The Office of the Data Protection Commissioner (ODPC) has confirmed an active investigation into an alleged massive data breach involving the mobile health-wallet platform M-Tiba. Reports suggest that highly sensitive medical and personal data of up to 4.8 million Kenyans was exfiltrated and offered for sale online.
- Alleged data leak involves 2.15 terabytes of data, including patient diagnoses, National ID numbers, full names, and telephone numbers.
- The ODPC is "actively engaging with the Data Processor, M-Tiba and other stakeholders to establish the full facts."
- The breach, if substantiated, could lead to significant legal and financial consequences for M-Tiba under the Data Protection Act 2019.
Continue Reading
Read the complete article from Techish Kenya
Part of the Day's Coverage
Safaricom Expands Infrastructure as Kenya Investigates Data Leak and DDoS Attacks - October 2025
Meta has partnered with Safaricom to make the Kenyan telecommunications company the landing partner for a new submarine cable connecting Kenya and Oman. This is Meta’s second significant undersea cable investment in Kenya. At the same time, Safaricom has expanded the retail availability of its 5G home internet routers, now selling them for KES 2,999 in all Naivas supermarkets. Amid this expansion, Kenya is facing cybersecurity challenges, leading East Africa in Distributed Denial of Service (DDoS) attacks with 46,786 reported in H1 2025, according to a NETSCOUT report. These attacks primarily targeted the telecommunications industry. Furthermore, Kenya’s Office of the Data Protection Commissioner (ODPC) confirmed an active investigation into an alleged data breach of the M-Tiba platform, reportedly involving sensitive data of up to 4.8 million Kenyans.
