Gov’t Identifies Group Behind Today’s Cyberattack on several of Its Websites

The government has confirmed that a group calling itself PCP@Kenya was behind the cyberattack that made several official websites go offline on Monday, November 17, 2025.

In a statement released by Interior Principal Secretary Raymond Omollo, the State Department for Internal Security said the attack was detected early and authorities acted immediately to stop it. 

According to the PS, the situation is now under control and recovery work is ongoing to fully restore the affected platforms.

The government reported that the attack temporarily disrupted access to key online services, leaving many citizens unable to access information or complete digital transactions. 

Several ministries were affected, including Interior, Health, Education, Energy, Tourism, Labour, and Water. Many users encountered error messages while trying to load the pages.

Officials said cybersecurity teams were activated as soon as the breach was noticed. 

Different government agencies and partners worked together to contain the situation and protect the national digital infrastructure from further damage.

“The government began incident response and recovery measures immediately,” PS Omollo said. 

“We are monitoring the situation closely and taking steps to prevent similar attacks.”

During the breach, hackers defaced some websites with disturbing messages. The defaced pages displayed phrases such as “Access denied by PCP,” “We will rise again,” and “White power worldwide.” 

Some sites also carried extremist slogans and coded messages linked to hate groups. 

The attackers further posted claims that certain institutions and politicians were supporting them.

The hacked pages also contained a link to a Telegram channel, which had gained more than 150 followers by the time the government regained control of the sites.

Authorities warned that those behind the cyberattack will face strict legal consequences. 

The government said the act violates several laws, including the Computer Misuse and Cybercrimes Act, the Kenya Information and Communications Act, and the Data Protection Act. Anyone found responsible will be prosecuted.

Despite the incident, the government assured the public that Kenya’s digital systems remain stable and that more measures are being put in place to strengthen cybersecurity.

“The government remains committed to protecting the country’s digital space,” PS Omollo added. 

“We are continually improving our cyber resilience and working with both the private sector and international partners to secure our systems.”

Citizens have been advised to stay alert and report any suspicious online activity to National KE-CIRT, NC4, or the DCI.

The attack has renewed discussions about the rising cases of cyber threats in the region and the need for stronger digital security practices. 

Post a Comment

Previous Post Next Post

Contact Form