Kenya has restored the official presidential website of President William Samoei Ruto, after it was temporarily taken offline following a cyberattack that defaced the platform and prompted a nationwide cybersecurity response.
The cyber incident, which occurred on July 18, saw attackers gain unauthorized access to the official website of President William Ruto. The hackers reportedly replaced the homepage with anti-government messages and demanded a ransom of five Bitcoin estimated at approximately KSh41 million (US$320,000), while threatening to release unspecified information if their demands were not met.
In response, Kenya’s Ministry of Information, Communications and the Digital Economy activated its incident response procedures through the ICT Authority. Access to the website was temporarily restricted to allow cybersecurity experts to contain the incident, conduct forensic investigations, and restore normal operations. Authorities have since confirmed that the website is back online and functioning normally.
Government officials have emphasized that, despite the website defacement, there is no evidence that sensitive government data was accessed, stolen, or exfiltrated. They also stated that other government digital services and critical systems remained secure and operational throughout the incident. A comprehensive forensic investigation is ongoing to determine the exact method used by the attackers and whether any additional security gaps exist.
The attack has reignited discussions about the cybersecurity posture of government institutions across Africa. Public-facing government websites remain attractive targets for cybercriminals and hacktivist groups seeking financial gain, political attention, or to undermine public confidence in digital government services.
Cybersecurity experts note that while website defacement does not necessarily indicate a compromise of internal government networks, it serves as a reminder of the importance of continuous vulnerability management, timely software updates, strong access controls, and proactive security monitoring.
The incident comes amid a growing wave of cyber threats targeting governments and critical infrastructure across the African continent. Recent reports indicate that ransomware attacks, phishing campaigns, website defacements, and other forms of cybercrime continue to increase, underscoring the need for stronger cyber resilience and regional cooperation.
As investigations continue, Kenyan authorities have reaffirmed their commitment to strengthening the country’s cybersecurity capabilities and protecting public digital infrastructure from future attacks.
About The Author
