The official website of the President of Kenya was hacked on Saturday, with unknown attackers taking control of the homepage and replacing government content with messages directed at President William Ruto.
The incident quickly raised concerns about the security of government websites and the ability of public institutions to protect sensitive digital systems from cyber threats.Visitors to president.go.ke were met with a defaced homepage instead of the usual official information.
The hackers posted insulting messages targeting the President and demanded a ransom payment in Bitcoin.
They also displayed a cryptocurrency wallet address and warned that they would release unspecified information if their demands were not met within a set deadline.
According to the message displayed on the site, the attackers demanded five Bitcoins and claimed this was their third warning.
The message threatened further action if payment was not made before the stated deadline. Based on current Bitcoin exchange rates, the demanded amount would be worth more than Ksh41 million.
The hackers also changed the website’s banner and included references to individuals identified as Glenn, Myerr, Ebby and Nevin.
Despite the changes, some elements of the official State House branding remained visible in the background, showing that the attackers had mainly altered what visitors could see on the homepage.
State House confirmed that it was aware of the breach and said its ICT team was working to address the problem. However, authorities did not immediately provide details on how the attack happened or whether any sensitive government data had been accessed.
One of the main concerns following the incident is whether the attackers only changed the appearance of the website or managed to gain deeper access to government systems.
Cybersecurity experts often warn that website defacement can sometimes be a sign of broader security weaknesses that may expose important information or services to risk.
The latest attack has also brought back memories of previous cyber incidents involving Kenyan government websites.
In November last year, several ministry and agency websites were compromised in what appeared to be a coordinated cyberattack.
Institutions affected included the ministries responsible for health, education, labour, environment, ICT, tourism and interior affairs, as well as State House.
During that incident, attackers replaced official content with unauthorised messages and caused disruptions that made some government websites inaccessible.
The attack affected services used by members of the public and exposed weaknesses in digital security systems across several institutions.
While some agencies such as the Ministry of Defence and the National Treasury were reported to have remained unaffected at the time, the latest breach of the President’s official website is likely to increase pressure on government agencies to strengthen cybersecurity measures and protect critical public infrastructure from future attacks.
