Massive Data Leak Exposes List Of Companies Linked To Uhuru and Ruto

A massive data breach at Kenya’s Business Registration Service (BRS) has exposed the business interests of some of the country’s most powerful individuals, including President William Ruto, the Kenyatta family, and other prominent investors.

The leaked information, which had remained largely inaccessible to the public, is now raising serious concerns about data security, privacy, and financial risks.

High-Profile Figures Named in Data Leak

At the center of the breach are First Lady Rachel Ruto, whose official name is Chebet Rael Kimeto, and her son, George Kimutai Ruto. The leaked records reveal their extensive investments across multiple sectors. Kimeto is listed as a director and shareholder in numerous companies, including Destiny Women Microfinance Bank Limited, Joyful Housing Union Ltd, Talya Company Limited, and Urban Groove Apartments Limited. She also has stakes in Lake Jipe Fisheries Ltd, Kisima Fisheries Ltd, Taveta Fisheries Ltd, Black Beauty Company Limited, Koilel Farm Limited, Matiny Limited, Weston Hotel Limited, and Bluesand Holdings Limited.

Meanwhile, George Kimutai Ruto appears to be involved in several investment ventures, including Golf Charlie Investments Limited (beneficial owner), Nerami LLP (partner), Golf Charlie Investment Limited (director/shareholder), TBT The Biashara Team Limited (director/shareholder), X Fold Limited (director/shareholder), and Seil Investment Limited (director/shareholder).

Former President Uhuru Kenyatta’s business dealings were also among the exposed data. While Uhuru Kenyatta Foundation and Uhuru Kenyatta Institute Limited are well-documented, the records also listed Uhuru Kenyatta Security and Cleaning Services, a company registered in South Africa. However, due to missing details, it remains unclear whether the former president has any links to the firm.

Muhoho Kenyatta, Uhuru’s brother, is reportedly a director or shareholder in at least 50 companies and organizations.

Moja Expressway and Foreign-Owned Companies Also Affected

The data breach also shed light on the ownership of Moja Expressway Company, registered on May 24, 2020. The company is owned by Mountain Hill Global Investment Company Limited (based in the UAE), Tang Jinsong, and Zhao Yang, with Jophece Obonyo Yogo listed as the secretary.

The breach, which appears to have compromised a significant amount of sensitive data, has sparked panic among industry experts and the public. A soot check finds confidential company information could be accessed with just a click, raising concerns about identity theft and financial fraud risks.

Kenneth Gathuma, Director-General of the Business Registration Service, confirmed the breach and announced that a full investigation is underway.

“Upon receiving reports regarding a potential data breach affecting the company registry’s information, we activated our Incident Response Plan,” Gathuma stated.

He assured the public that cybersecurity experts are working alongside law enforcement agencies to assess the extent of the compromise and identify vulnerabilities.

“We are still verifying the details of the alleged breach, including the nature and extent of any compromised data,” he added.

The leak has reignited discussions on Kenya’s data protection laws and the effectiveness of its cybersecurity infrastructure, with many calling for urgent reforms to safeguard private and corporate information.