Kenya faces major cyberattack as government website hacked in Nairobi

The official website of Kenya’s presidency came under a severe cyberattack on the afternoon of Saturday, July 18, 2026. While authorities in Nairobi initially described the incident as a technical glitch leading to a temporary shutdown of the portal, subsequent investigations confirmed it was a coordinated defacement attack followed by a ransom demand in cryptocurrency.

Around 2 p.m. local time, visitors attempting to access president.go.ke were met with a distorted homepage. Instead of the usual content featuring speeches and official statements by President William Ruto, hackers replaced it with derogatory messages targeting the head of state. The intrusion went beyond mere vandalism, as cybercriminals appended a ransom note demanding 5 Bitcoins—roughly $320,000 or 41 million Kenyan shillings—in exchange for not leaking purportedly compromising data about the executive branch.

The attackers warned in bold text: “This is your third and final warning; reveal everything about you before tonight or face the consequences.” The ultimatum was set to expire by the end of the day, amplifying pressure on authorities to respond swiftly.

The government’s response: containment and controlled messaging

Given the attack’s high-profile nature—targeting the apex of Kenya’s digital governance—the State House moved quickly to contain the fallout. The National KE-CIRT/CC and technical teams from the presidency shut down public access to the compromised portal for forensic analysis and restoration.

William Kabogo Gitau, Cabinet Secretary for Information, Communications, and Digital Economy, took to social media to downplay the severity, framing the breach as a routine “incident” rather than an outright hack. He stressed that no evidence suggested unauthorized access to sensitive state data or exfiltration of classified information. According to official statements, internal government systems remained fully operational and secure throughout the ordeal.

Kenya’s cyber vulnerability: a recurring national challenge

This attack is not an anomaly for Kenya, a country often hailed as East Africa’s tech hub and the “Silicon Savannah.” Just eight months prior, in November 2025, a coordinated cyber offensive disrupted digital services across four critical ministries: Education, Health, Interior, and Information & Communications. Cybersecurity analysts point out that targeting a .go.ke domain is a deliberate strategy—it guarantees immediate media attention, public alarm, and heightened leverage for extortion.

Recent assessments by international agencies have ranked Kenya among Africa’s most exposed nations to cyber threats, with billions of intrusion attempts logged annually. The frequency and sophistication of these attacks underscore systemic gaps in the country’s digital defense infrastructure.

Digital transformation at risk: balancing speed with security

Though the presidency’s website has since been restored under maintenance by the Communications Authority of Kenya, the breach raises urgent questions about the resilience of the nation’s critical digital systems. President Ruto has championed rapid digitization of public services as a cornerstone of his administration. Yet, experts warn that without proportional investment in cybersecurity, accelerated digital adoption could expose the state to even greater vulnerabilities.

In response, the government has established a new National Cybersecurity Agency tasked with centralizing crisis management. The State House hack serves as an early stress test for this fledgling institution. Whether Kenya can safeguard its digital sovereignty hinges on two factors: the speed of full system restoration and the transparency of forensic findings. For now, the nation watches closely—its digital future hanging in the balance against increasingly bold cyber adversaries.