Naivas Supermarket

Naivas, also known as Naivas Supermarket, operates as a retail supermarket chain headquartered in Kenya. The company offers a range of grocery items, fresh produce, household essentials, and other consumer goods to customers across its stores. Its business model includes both physical storefronts and a loyalty program that collects customer personal information such as names and contact details. Naivas serves the Kenyan market, focusing on urban and suburban consumers seeking everyday shopping needs. The organization positions itself as a convenient one-stop shop for daily necessities within the local retail sector.

Naivas is described as a major Kenyan retail chain, indicating a significant presence and customer base within the country's retail landscape. In April 2023, the company experienced a ransomware attack claimed by the BlackCat group, which resulted in the exfiltration of over one terabyte of data. A separate ransomware incident earlier in April 2023 was attributed to a criminal organization that compromised some of its data, including information from its loyalty program. In response to these incidents, Naivas engaged cybersecurity firms such as CrowdStrike, involved law enforcement and data protection authorities, and publicly notified affected customers. The company emphasized that payment card information was not stored on the compromised systems, thereby asserting that financial data remained secure. These events have highlighted Naivas's reliance on digital systems for operations and its need to strengthen cybersecurity resilience while maintaining customer trust.