Africa · Eastern

Key Facts

—Incident. Hackers defaced president.go.ke on 18 July 2026, replacing official content with insults and a ransom note.

—Ransom. Attackers demanded 5 Bitcoin, approximately KSh 41.3 million or US$320,000, threatening to leak unspecified information.

—Response. ICT Cabinet Secretary William Kabogo Gitau confirmed the site was restricted for containment and forensic analysis, stating no sensitive data was compromised.