Kenya president’s website hacked, attackers demand 5 Bitcoin ransom

Kenya president’s website hacked, attackers demand 5 Bitcoin ransom

Kenya restored President William Ruto’s official website after a homepage defacement, with investigators saying they have found no evidence so far of sensitive-data access, theft or wider system compromise.

BTC

Fact Check
Multiple sources, including a primary Kenyan news report citing ICT CS Kabogo, confirm the July 18, 2026 breach of president.go.ke, the 5 Bitcoin ransom demand, activation of cyber response protocols, temporary access restriction for forensic work, and the finding that no sensitive data was compromised. All claim elements are directly corroborated.
    Reference123
Summary

Kenya restored President William Ruto’s official website on Sunday after unknown hackers defaced the homepage, demanded 5 Bitcoin and threatened to leak alleged stolen files if payment was not made by 6 p.m. on Saturday. Visitors to president.go.ke had been shown a cryptocurrency wallet address, insulting messages aimed at the president and a countdown timer instead of official content. The Ministry of Information, Communications, and the Digital Economy said the breach was detected shortly after it occurred and that public access was quickly restricted while forensic investigations began. Cabinet Secretary William Kabogo Gitau said investigators had found no evidence of unauthorized access to sensitive government data, data downloads or information loss, and said government digital services remained safe, secure and operational. The investigation involves the National Computer and Cybercrime Coordination Committee, State House technical teams and external cybersecurity partners. The incident has intensified focus on Kenya’s public-sector cyber defenses after earlier coordinated attacks on government websites and a 2023 DDoS attack that disrupted access to the eCitizen platform, as the country moves to strengthen oversight through its newly approved National Cybersecurity Agency.

Terms & Concepts
  • Bitcoin ransom: A demand for payment in bitcoin in exchange for stopping a threatened leak or other cyberattack action.
  • forensic investigations: Technical examinations used to determine how a cyber incident happened and what systems or data were affected.
  • DDoS attack: A distributed denial-of-service attack, which overwhelms a website or service with traffic to make it unavailable.