Kenya's government is investigating a cyberattack that disabled President William Ruto's official website on July 18, with hackers defacing the homepage and demanding 5 bitcoins to prevent a threatened data leak. The attackers replaced standard content on president.go.ke with derogatory messages and set a Saturday evening deadline for ransom payment. This incident marks the second high-profile cyberattack on Kenyan state infrastructure within a year, following a coordinated attack in November 2025 that briefly compromised several ministry websites.
Hackers Deface President Ruto Website and Demand 5 Bitcoin Ransom
The website president.go.ke was taken offline on July 18 after hackers replaced its standard content with derogatory messages directed at President William Ruto. The attackers demanded five bitcoins and threatened to leak unspecified information if the ransom was not paid by Saturday evening. Authorities temporarily restricted public access to the portal to contain the issue and allow for a forensic investigation. At the time of writing on July 18 at 1:51 PM EST, the website remained down.
Kenya Government Activates Cybersecurity Response and Forensic Investigation
William Kabogo, the cabinet secretary for the Ministry of Information, Communications and the Digital Economy, confirmed that the government's ICT Authority immediately activated cybersecurity response protocols. "At this time, there is no evidence of unauthorized access to sensitive data, data exfiltration, or loss of information," Kabogo said in a statement posted on the social media platform X. "Government systems and digital services remain secure and operational." State House officials confirmed their technical teams were working alongside the National Computer and Cybercrime Coordination Committee (NC4) and outside technical partners to restore the page and determine how the security perimeter was breached.
Kenya Faced Billions of Cyber Threats Earlier This Year
This incident marks the second high-profile cyberattack on Kenyan state infrastructure within a year. In November 2025, a coordinated attack briefly compromised several ministry websites, sparking heightened scrutiny over the resilience of the East African nation's expanding digital public services. A recent NC4 report noted that Kenya's critical infrastructure and government systems faced billions of cyber threats over three months earlier this year, prompting ongoing efforts to standardize cybercrime investigations nationwide.
FAQ
What happened to President William Ruto's website on July 18?
Hackers defaced President William Ruto's official website president.go.ke on July 18, replacing standard content with derogatory messages and demanding 5 bitcoins by Saturday evening to prevent a threatened data leak. The government took the website offline and activated cybersecurity response protocols.
What did Kenya's government say about the cyberattack?
Cabinet Secretary William Kabogo confirmed that the ICT Authority immediately activated cybersecurity response protocols and stated there is no evidence of unauthorized access to sensitive data, data exfiltration, or loss of information. State House technical teams are working with the National Computer and Cybercrime Coordination Committee (NC4) and outside partners to restore the website and investigate the breach.
How many cyberattacks has Kenya experienced recently?
This is the second high-profile cyberattack on Kenyan state infrastructure within a year. In November 2025, a coordinated attack briefly compromised several ministry websites. A recent NC4 report noted that Kenya's critical infrastructure and government systems faced billions of cyber threats over three months earlier this year.
