Cyberattack Targets Kenyan President’s Website, Government Confirms Incident
On July 18, 2026, the Kenyan government confirmed a cybersecurity breach affecting the official website of President William Ruto. Cabinet Secretary for Information, Communications, and the Digital Economy William Kabogo stated that the ICT Authority detected the incident and activated cybersecurity response protocols.
As a precaution, access to the presidential website was temporarily restricted to contain the breach, conduct forensic analysis, and restore services. Kabogo assured that no evidence of unauthorized access to sensitive data, exfiltration, or loss of information had been found, and government systems remained secure.
The attack followed reports that hackers had compromised the website, displaying a ransom demand of five bitcoins equivalent to approximately Ksh41.3 million (based on the then-current exchange rate). The attackers threatened to leak sensitive government information if the payment was not made by a specified deadline.
The incident occurs amid rising cyber threats in Kenya, with the National Computer and Cybercrime Coordination Committee (NC4) reporting over three billion cyberattacks on government systems, cloud services, and critical infrastructure in a recent three-month period. Nairobi has seen the highest concentration of cybercrime cases, including unauthorized access, fraud, and identity theft.
The NC4, chaired by Principal Secretary Raymond Omollo, is collaborating with sectors such as banking, telecommunications, and energy to bolster cyber defenses. A Rapid Reference Guide is also in development to standardize cybercrime investigations and prosecutions.
A forensic investigation is underway to determine the full scope of the breach as the government works to restore the presidential website.
Government of Kenya TPRM report: https://www.rankiteo.com/company/gok-government-of-kenya
"id": "gok1784384657",
"linkid": "gok-government-of-kenya",
"type": "Ransomware",
"date": "7/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Public Sector',
'location': 'Kenya',
'name': 'Government of Kenya (Presidential Website)',
'type': 'Government'}],
'data_breach': {'data_exfiltration': 'No evidence found'},
'date_detected': '2026-07-18',
'date_publicly_disclosed': '2026-07-18',
'description': 'The Kenyan government confirmed a cybersecurity breach '
'affecting the official website of President William Ruto. The '
'ICT Authority detected the incident and activated '
'cybersecurity response protocols. Access to the presidential '
'website was temporarily restricted to contain the breach, '
'conduct forensic analysis, and restore services. A ransom '
'demand of five bitcoins was displayed, threatening to leak '
'sensitive government information if not paid.',
'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
'public disclosure',
'data_compromised': 'No evidence of unauthorized access to '
'sensitive data or exfiltration found',
'downtime': 'Temporary restriction of access',
'operational_impact': 'Forensic analysis and restoration efforts',
'systems_affected': 'Presidential website'},
'investigation_status': 'Ongoing',
'motivation': 'Financial gain, potential data extortion',
'ransomware': {'data_exfiltration': 'Threatened but no evidence found',
'ransom_demanded': '5 bitcoins (approx. Ksh41.3 million)'},
'references': [{'date_accessed': '2026-07-18',
'source': 'Government of Kenya (Cabinet Secretary for '
'Information, Communications, and the Digital '
'Economy)'}],
'response': {'communication_strategy': 'Public disclosure by Cabinet '
'Secretary for Information, '
'Communications, and the Digital '
'Economy',
'containment_measures': 'Temporary restriction of access to the '
'presidential website',
'incident_response_plan_activated': 'Yes',
'remediation_measures': 'Forensic analysis and restoration '
'efforts'},
'title': 'Cyberattack on Kenyan President’s Website',
'type': 'Ransomware'}