The Kenyan government has announced that it has successfully contained a coordinated cyberattack that temporarily disrupted several official websites on Monday, affecting access to public information and services. This incident, confirmed by the Ministry of Interior, was executed by a group identifying itself as PCP@Kenya.

On November 17, several government portals unexpectedly went offline, prompting an emergency digital response from the State Department for Internal Security. The attackers targeted multiple domains across various ministries and key public service platforms, leading to temporary outages until the state’s cybersecurity teams intervened.

Authorities confirmed the breach was contained to affected sites, and government cyber forensics teams quickly stabilised the systems. Access to most websites was restored by midday.

Officials warn of rising digital threats as investigation begins

The Interior Ministry described the incident as a “coordinated intrusion,” noting the increasing sophistication of attacks on government digital infrastructure. Kenyan cybersecurity teams, in collaboration with private-sector experts, have launched a full incident-response effort to prevent further attacks and secure compromised systems.

Kenya is currently digitising its public services, making any disruption a major concern for national resilience and data protection. Government websites are vital for accessing essential services like vital records and license applications, so even small breaches highlight the risks to online systems.

Also read: Nigeria recorded an average of 6,101 cyberattacks weekly in July 2025

Officials state that events like this highlight why cybersecurity is crucial to Kenya’s digital transformation agenda. The hack has raised new concerns about the effectiveness of government firewalls, identity systems, and monitoring tools.

Government urges public vigilance as legal implications kick in

While the affected platforms are now accessible again, the government is urging Kenyans to remain vigilant and report any suspicious online activity as investigations are ongoing. The intrusion violates multiple national laws, including the Computer Misuse and Cybercrimes Act, the Kenya Information and Communications Act, and the Data Protection Act, all of which carry severe penalties.

Authorities emphasised that anyone found responsible will face prosecution. Dr Raymond Omollo, who chairs the National Computer and Cybercrimes Coordination Committee (NC4), stated that Kenya is enhancing its cyber-resilience capabilities in collaboration with private-sector partners and international stakeholders.

To protect themselves, users are advised to take note of the following reminders:

• Avoid logging into government websites through unofficial links
• Report suspicious messages, prompts, or login requests immediately
• Do not proceed if you are asked to accept unfamiliar terms or permissions

The government asserts that the situation is now under control, but the attack serves as a reminder that, as Kenya advances further into the digital age, the threats are increasing just as quickly.