Hackers Demand 5 Bitcoin After Defacing Kenyan President’s Website

Kenyan President’s Official Website Hacked

In a significant breach of digital security, hackers have successfully disabled the official website of Kenyan President William Ruto, demanding a ransom of 5 Bitcoin for its restoration. The attack, occurring on July 18, involved the replacement of the homepage with insulting messages aimed at Ruto.

Ongoing Investigations

The Kenyan government has launched an investigation into the breach, prompting a review by state investigators along with external partners to understand how the hackers gained access to the site. According to officials, as of their latest updates, there was no evidence that sensitive data had been accessed, stolen, or compromised.

Government Response and Security Measures

William Kabogo, the cabinet secretary for the Ministry of Information, Communications and the Digital Economy, confirmed that the government’s ICT Authority activated its cybersecurity response protocols to address the situation. Public access to the compromised site has been restricted while technical teams work to secure it and conduct a forensic analysis.

“At this time, there is no evidence of unauthorized access to sensitive data, data exfiltration, or loss of information. Government systems and digital services remain secure and operational,” stated Kabogo.

Despite the reassurances, the presidential website remained inaccessible as of July 18, 1:51 p.m. EST, and officials have yet to disclose whether they have interacted with the hackers or are considering fulfilling their Bitcoin ransom demand.

Security Concerns and Cyber Threats

The demand for Bitcoin highlights ongoing security challenges faced by Kenyan authorities, especially after prior cyberattacks. A similar incident in November 2025 briefly affected multiple ministry websites, raising concerns about the robustness of protections for public digital services.

The National Computer and Cybercrime Coordination Committee (NC4) has recorded billions of cyber threats in recent months, prompting the government to streamline how cybercrime cases are investigated across the nation. While the identity of the hackers remains unknown, the ransom demand emphasizes the central role of cryptocurrency in modern cybercrime.

Global Implications of Cyberattacks

This incident is part of a broader pattern of crypto-related cyberattacks that have recently drawn increased scrutiny from regulators worldwide. As governments and financial regulators monitor these developments, the incident underscores the intertwined nature of cybersecurity and cryptocurrency in contemporary digital economies.