NAIROBI, Kenya—The government has confirmed that President William Ruto’s official website was targeted in a cybersecurity incident, prompting authorities to temporarily restrict access as forensic investigations and recovery efforts continue.
In a statement issued on Saturday, the Ministry of Information, Communications and the Digital Economy said the incident was detected by the ICT Authority, which immediately activated its cybersecurity response protocols to contain the breach.
“As a precautionary measure, access to the Presidential website was temporarily restricted to facilitate containment, forensic analysis and restoration efforts,” ICT Cabinet Secretary William Kabogo said.
The confirmation came after users reported being unable to access the President’s official website, president.go.ke, amid concerns over a possible cyberattack targeting one of the country’s key government digital platforms.
Before access was restricted, the website was reportedly defaced, with its homepage allegedly replaced by messages targeting President William Ruto. Reports circulating online also claimed that the attackers demanded a Bitcoin ransom equivalent to approximately KSh41 million. However, the government has not confirmed the authenticity of those claims or whether any ransom demand was made.
According to the ministry, mitigation measures have already been implemented and efforts to restore the website are ongoing.
Officials sought to reassure the public that there is currently no indication that sensitive government information was compromised.
“At this time, there is no evidence of unauthorised access to sensitive data, data exfiltration, or loss of information. Government systems and digital services remain secure and operational,” CS Kabogo said.
The ministry said the ICT Authority is working closely with relevant government agencies and technical partners to determine the nature of the incident and identify those responsible.
“ICT Authority is working closely with the relevant Government agencies and technical partners to conduct a comprehensive forensic investigation and establish the full circumstances surrounding the incident,” Kabogo added.
The government has not disclosed the nature of the cyberattack, whether it originated locally or internationally, or whether any individual or group has claimed responsibility.
The incident nevertheless highlights growing concerns over cybersecurity threats targeting critical government digital infrastructure as Kenya continues to expand digital public services and modernise state operations.
Investigations remain ongoing, with authorities saying work to restore the presidential website is continuing.
