Several Kenyan government websites were subject to a coordinated cyberattack by a group calling itself “PCP@Kenya” on November 17, 2025. The government has since contained the situation and most digital services are returning to normal.
Details of the November 2025 Incident
- Attacker Group: PCP@Kenya.
- Targeted Websites: Websites for key ministries including Interior, Health, Education, Water, and Labour were temporarily inaccessible or defaced.
- Current Status: The situation has been contained, and the systems are under continuous monitoring.
Past Major Incidents
Kenya has experienced several cyber incidents targeting government systems over the years:
- February 2025 Data Breach: A major data breach of the country’s national business registry system exposed over a million company records, including personal residences and tax information. The government acknowledged the incident and claimed to have strengthened security protocols.
- May 2023 Chinese Hacking Allegations: A Reuters report indicated that Chinese hackers targeted various government agencies, including the office of the President, the Finance Ministry, and the Ministry of Foreign Affairs, to gather intelligence related to Kenya’s debt repayments to China. The Kenyan and Chinese governments both denied these allegations.
- July 2023 Attack by Anonymous Sudan: A group called Anonymous Sudan claimed responsibility for a cyberattack on the government’s eCitizen services portal, which caused disruptions to various online public services.
- 2012 Defacement: An Indonesian hacker defaced over 100 government websites.
The attack caused widespread and significant concern over the security and integrity of public data across multiple platforms. Numerous defaced websites displayed various provocative messages such as “Access denied by PCP,” “We will rise again,” along with other similar slogans intended to convey their message and mark their presence.
The attack caused widespread concern over the security of public data. Some defaced sites displayed messages like “Access denied by PCP,” “We will rise again,” and other slogans.
The government activated a multi-agency incident response team, including the National KE-CIRT/CC and the National Computer and Cybercrimes Coordination Committee (NC4), to handle the intrusion.
