In a statement issued hours after the incident, Cabinet Secretary William Kabogo assured the public that the breach only affected website accessibility and did not result in any data loss, alteration, or unauthorized access.
“The Ministry of Information, Communications and The Digital Economy informs the public that on the morning of 17th November, 2025, a number of government websites experienced a temporary outage. Our teams acted quickly, and all services are now fully restored,” the statement read.
ICT CS William Kabogo before the National Assembly Committee on Communication, Information, and Innovation (CII) on February 25, 2025.
“The issue affected website access only. No personal or government data was accessed, altered, or lost. We applied immediate mitigation measures and took the necessary actions to secure the affected sites. We have increased monitoring to prevent similar issues,” it added.
Scope of the Attack
The cyberattack targeted websites belonging to key ministries and state departments, including Health, Education, Labour, Environment, ICT, Tourism, Interior, and the Office of the President. The State House website was among those defaced, with attackers altering visual elements and embedding extremist messages.
Phrases such as “Access denied by PCP,” “We will rise again,” “White power worldwide,” and “14:88 Heil Hitler” were displayed on the compromised sites, prompting alarm over the nature and intent of the breach.
However, a spot check revealed that ministries such as Defence and Treasury were not affected.
Public Disruption and Response
The outage disrupted access to vital online services, frustrating citizens who rely on government portals for information and transactions. The Ministry’s swift response, including the deployment of cybersecurity teams and restoration of services, helped contain the incident within hours.
An illustration of someone engaging in cybercrime
Cybersecurity experts have commended the Ministry’s transparency but warned that the attack highlights vulnerabilities in Kenya’s digital infrastructure.
“This incident should serve as a wake-up call for enhanced cybersecurity protocols across all government platforms,” said one analyst familiar with the matter.
While no group has claimed responsibility for the latest incident, authorities are expected to launch a full investigation to determine the source and motive behind the attack.