Naivas admits to ransomware theft of data. Credit: Towfiqu barbhuiya on Unsplash.

Kenya-based supermarket chain Naivas has confirmed that it was a victim of a ransomware attack carried out by an online criminal organisation.

A statement from Naivas’ chief commercial officer Willy Kimani said that some of the company’s data had been compromised, but the containment process is complete and its system is now secure.

Go deeper with GlobalData

Data Insights

The gold standard of business intelligence.

Find out more

Related Company Profiles

View all

Naivas chief commercial officer Willy Kimani said: “Naivas regrets to announce that alongside many corporates and organisations in and outside Kenya, we have been the victims of a ransomware attack by an online criminal organisation (Threat Actor).

“Naivas has been made aware that the Threat Actor has claimed to have stolen some of our data and is alleging that this may be published in due course. We and law enforcement agencies are monitoring this closely. Naivas has also informed the Office of the Data Protection Commissioner Kenya of this incident.”

Meanwhile, Naivas reassures its customers that its systems do not hold any credit or debit card information.

The retailer also claimed to securely handle payment information and is protected through Secure Sockets Layer (SSL) encryption.

How well do you really know your competitors?

Access the most comprehensive Company Profiles on the market, powered by GlobalData. Save hours of research. Gain competitive edge.

Company Profile – free sample

Thank you!

Your download email will arrive shortly

Not ready to buy yet? Download a free sample

We are confident about the unique quality of our Company Profiles. However, we want you to make the most beneficial decision for your business, so we offer a free sample that you can download by submitting the below form

By GlobalData
Visit our Privacy Policy for more information about our services, how we may use, process and share your personal data, including information of your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.

There is currently no evidence of any malicious use of stolen data, but Naivas has warned customers to be vigilant for any phishing attempts by phone, SMS, or email.

Kimani added: “We take the protection of personal information very seriously. Please accept our deepest apologies for the worry and inconvenience that this criminal activity may cause.”

The attack on Naivas’ data comes just a week after the Australian supermarket Coles confirmed that a cybercriminal group had stolen its historical customer credit card information.