Several Government of Kenya websites linked to major ministries and state agencies were taken offline on Monday morning in a suspected cyberattack that defaced pages and temporarily blocked access to critical online services.
Websites belonging to the Ministries of Health, Education, Labour, Environment, ICT and Tourism, as well as State House and the Interior Ministry, were unresponsive after attackers altered their visual appearance and posted messages including “Access denied by PCP”, “We will rise again”, “White power worldwide”, and “14:88 Heil Hitler”. Furthermore, it displayed “ABSA is working with us”
The disruptions left many users unable to access essential services, including updates and applications that rely on government portals. Screengrabs from the affected websites showed altered landing pages and error displays.
A number of state departments also went offline, among them the Immigration Department, the Directorate of Public Private Partnerships, the Directorate of Criminal Investigations, the Hustler Fund platform, the Immigration State Department portal, the Government Press, and the Nairobi County website.
By the time of publication, the government had not issued a statement regarding the incident, and no group had claimed responsibility for the coordinated disruption. Key platforms including eCitizen, the National Transport and Safety Authority, the Judiciary, the Kenya National Examinations Council, and the National Police Service were operating normally.
Kenya experienced a similar incident in 2023 when a Sudanese hacker group claimed to have targeted government websites in protest over alleged Kenyan interference in Sudan’s affairs, although the group offered no evidence to support its claims.
Sites Restored.
The websites were fully restored hours after the attack, and authorities confirmed that the breach had been contained.
Interior PS Raymond Omollo said preliminary findings show the attack was carried out by a group calling itself “PCP@Kenya.” He noted that several state platforms were temporarily inaccessible, adding that emergency procedures were activated immediately and technical teams worked with key stakeholders to stabilise the systems. “The situation has since been contained, and the systems are under continuous monitoring,” he said.
Omollo said the Government has intensified efforts to reinforce national cybersecurity measures and prevent similar incidents in future. He described the breach as a violation of Kenyan law and international conventions, warning that those responsible will face prosecution under the Computer Misuse and Cybercrimes Act, the Kenya Information and Communications Act, and the Data Protection Act.
“We immediately activated our incident response and recovery procedures to mitigate the impact and restore access to the affected platforms,” he said, assuring the public of the state’s commitment to protecting national digital infrastructure and strengthening early detection, rapid containment, and decisive neutralisation of future threats.
