Kenya faces major cyberattack on presidential website amid rising digital threats

The official website of Kenya’s presidency fell victim to a large-scale cyberattack on the afternoon of July 18, 2026, forcing authorities in Nairobi to take the portal offline temporarily. While government officials initially downplayed the incident as a technical glitch, subsequent investigations confirmed it was a malicious hacking attempt accompanied by a cryptocurrency ransom demand.

Disruption and extortion: a bold digital assault

Around 2:00 PM on that Saturday, visitors attempting to access president.go.ke were met with an unexpected sight. The homepage, typically showcasing speeches and statements from President William Ruto, had been replaced with a distorted display featuring derogatory messages targeting the head of state. The hackers went further by embedding a ransom note demanding 5 Bitcoins—approximately $320,000 or KSh 41 million—threatening to expose alleged sensitive or embarrassing government data if payment was not made by evening.

The extortion message read: “This is your third and final warning. Release the funds or suffer the consequences.”

Government response: containment and narrative control

In the wake of the high-profile breach, Kenyan authorities moved swiftly to contain both the technical threat and its political fallout. The State House’s cybersecurity unit, alongside the National KE-CIRT/CC, immediately restricted public access to the site to isolate the intrusion. Information Cabinet Secretary William Kabogo Gitau addressed the press, framing the incident as an “operational disruption” rather than a breach, despite mounting evidence to the contrary.

“The website was taken offline to allow for forensic analysis and secure restoration,” Gitau stated, adding that no evidence of data compromise or exfiltration had been detected. Authorities insisted that internal government systems remained fully operational and secure.

A history of digital vulnerability

This attack is not an isolated incident for Kenya, which has long been regarded as East Africa’s technology hub. Just eight months prior, in November 2025, the country experienced a coordinated cyber offensive that disrupted services on four critical government portals, including the Ministries of Education, Health, Interior, and Information.

Cybersecurity analysts highlight that targeting a .go.ke domain is no coincidence. Such attacks maximize media impact, instill public panic, and amplify extortion leverage. Recent reports by international agencies have ranked Kenya among Africa’s most cyber-threatened nations, with billions of intrusion attempts logged annually.

The cost of rapid digital transition

Though the presidential website has since been restored under maintenance by the ICT Authority, the breach underscores the fragility of Kenya’s digital infrastructure. President Ruto’s administration has prioritized digitizing public services, but experts warn that without proportional investment in cybersecurity, the country remains exposed to escalating risks.

To strengthen its defenses, the government recently established a National Cybersecurity Agency, tasked with unifying crisis response. The State House hack serves as a critical test for this new framework. The efficiency of the recovery process and the transparency of the investigation’s findings will determine whether Kenya is equipped to safeguard its digital sovereignty against increasingly bold cybercriminals.