Kenya faces major cyberattack on presidential website

State House website targeted in brazen digital assault

On a quiet Saturday afternoon in Nairobi, Kenya’s digital landscape was rocked by an unprecedented cyber strike. The official website of the presidency—president.go.ke—was hijacked by unidentified hackers, leaving visitors greeted by a defaced page instead of the usual state communications and presidential remarks. The incident unfolded around 2 p.m., sending shockwaves through the country’s cybersecurity circles and raising urgent questions about Kenya’s preparedness against digital threats.

The attack wasn’t merely symbolic—it came with a calculated demand for ransom. Cybercriminals left a cryptocurrency wallet address on the compromised site, insisting on a payment of 5 Bitcoins—approximately $320,000 or 41 million Kenyan shillings—within hours. A chilling message accompanied the demand: “This is your third warning; pay up or face exposure.” Authorities later confirmed the threat, though they downplayed its immediate impact on national security.

Government response: containment and crisis messaging

Within minutes of the breach, Kenya’s cybersecurity teams swung into action. The State House technical division and the National KE-CIRT/CC swiftly took the presidential portal offline, isolating the intrusion to prevent further damage. The Minister for Information, Communications and Digital Economy, William Kabogo Gitau, took to social media to calm public concerns, framing the breach as a “technical incident” rather than a confirmed hack—at least initially.

“The temporary shutdown was a precautionary measure to allow forensic analysis and restore full service,”

Gitau stated. He emphasized that no evidence suggested unauthorized access to sensitive government systems or data exfiltration. Officials maintained that core government services remained fully operational, though the defacement itself sent a clear message about the evolving sophistication of Kenya’s adversaries in cyberspace.

A pattern of digital vulnerability

This was not the first time Kenya’s digital infrastructure had come under fire. Just eight months prior, in November 2025, a coordinated cyber offensive crippled four critical government portals—Education, Health, Interior, and Information ministries. The recurrence of such attacks has placed Kenya under the spotlight, with global cybersecurity watchdogs warning of rising digital threats across the region.

Security experts point out that targeting a .go.ke domain is a deliberate strategy. Such high-profile breaches generate immediate media attention, amplify public anxiety, and create leverage for extortion. The defacement of the presidency’s site—regardless of short-term data access—sends a powerful signal to both citizens and adversaries: Kenya’s digital sovereignty is under siege.

Interpol’s latest threat assessment ranked Kenya among Africa’s most targeted nations, with billions of intrusion attempts logged annually. The frequency and scale of these incidents underscore a harsh reality: rapid digitization without proportional investment in cyber defense creates dangerous vulnerabilities.

Can Kenya secure its digital future?

The aftermath of the attack saw the presidential website restored under maintenance, managed by the ICT Authority. Yet the episode raises critical questions about the resilience of Kenya’s critical digital systems. President William Ruto has championed public sector digitization as a cornerstone of his administration, but this push toward a “digital-first” government exposes the nation to escalating risks—especially when cybersecurity budgets lag behind technological adoption.

In response, the government recently established a National Cybersecurity Agency to centralize crisis response and strengthen defenses. The breach of the State House website serves as its first major test—a real-time trial of whether Kenya can protect its digital sovereignty against increasingly bold cybercriminals.

For now, the focus remains on restoring trust. The speed of full recovery and the transparency of forensic findings will determine whether Kenya has the tools—and the will—to face the cyber threats of tomorrow.