PUBLIC CAUTION (DEC-2025)

The Sacco Societies Regulatory Authority (SASRA) has noted with concern emerging trends from periodic cyber-threat analysis and intelligence monitoring indicating a heightened risk of cyber-security breaches within the regulated SACCO subsector during long-weekend public holidays. Historical patterns consistently demonstrate that a significant number of cyber incidents occur in the period immediately preceding the commencement of such holidays, as well as during late evening and night hours throughout the holiday period.

In light of the upcoming Jamhuri Day long weekend and the Christmas and New Year holiday season, this advisory is issued to alert all Regulated SACCOs to the elevated risk environment and to underscore the need for enhanced cyber-security vigilance. The Authority therefore calls upon all DT-SACCOs and Regulated Non-WDT-SACCOs to strengthen surveillance, monitoring, and response mechanisms across their Management Information Systems, digital financial service channels, and related ICT infrastructure to safeguard members’ data, funds, and transactions during this period.