TL;DR:
- The official website of the President of Kenya was temporarily defaced following a ransom demand of 5 Bitcoin.
- The economic demand amounted to approximately 41 million Kenyan Shillings (around $320,000) in July 2026.
- The official technical investigation is being led by the National Computer and Cybercrime Coordination Committee (NC4).
After falling victim to a cyberattack, Kenyan government authorities restored President Ruto’s website. The cyber incident occurred during the weekend of July 18, when hackers defaced the homepage to demand a cryptocurrency payment.
The attackers replaced the official portal with a countdown timer and a message directed at the president. Additionally, they requested the transfer of 5 Bitcoin before 6:00 p.m. on Saturday under the threat of leaking alleged confidential files. The demanded amount represented nearly 41 million Kenyan Shillings.
Kenya’s Ministry of Information, Communications, and the Digital Economy reported that the intrusion was detected quickly, and access was restricted as a preventive measure. Preliminary government evaluations indicate no evidence of unauthorized access or data exfiltration from the platform.
Forensic Investigations and Cybersecurity Context
The National Computer and Cybercrime Coordination Committee (NC4) is leading the technical analysis alongside external experts. According to statements by Cabinet Secretary William Kabogo, the country’s critical infrastructure and digital services continue to operate normally.
This breach occurs amid a steady rise in digital threats within the region. Kenyan government data suggests state systems recorded over three billion attempted cyberattacks in a recent three-month period.
Additionally, the presidential portal suffered outages last year alongside several ministries in attacks attributed to the group PCP@Kenya. In 2023, the eCitizen platform also experienced massive disruptions due to distributed denial-of-service (DDoS) attacks.
Final findings from investigators could shape the country’s next steps under the Computer Misuse and Cybercrimes Act. The newly approved regulatory body, the National Cybersecurity Agency, will centralize state defense policies.
Be the first to comment