Government websites that went offline following a cyberattack on Monday have been restored following a cyber breach.
In a statement on November 17, Interior PS Raymond Omollo confirmed the incident, saying the situation has been fully contained.
Omollo said the breach temporarily rendered several state websites inaccessible, adding that preliminary findings show the attack was carried out by a group calling itself “PCP@Kenya.”
Omollo said emergency response procedures were activated immediately after the disruption.
According to him, technical teams worked with stakeholders to stabilise the situation and restore affected platforms.
“The Government of Kenya wishes to notify the public that on November 17, 2025, a cybersecurity incident occurred in which several government websites were rendered temporarily inaccessible. Preliminary investigations indicate that the attack is suspected to have been carried out by a group identifying itself as ‘PCP@Kenya’,” the PS said.
“Following the incident, we immediately activated our incident response and recovery procedures, working closely with relevant stakeholders to mitigate the impact and restore access to the affected platforms. The situation has since been contained, and the systems are under continuous monitoring.”
The PS said that efforts are underway to strengthen defences to prevent similar incidents by ensuring that cyber threats are detected early, contained quickly, neutralized decisively, and its impact minimised.
The PS described the breach as a violation of Kenyan law and relevant international conventions.
Those responsible, the PS warned, will face prosecution under the Computer Misuse and Cybercrimes Act, the Kenya Information and Communications Act, and the Data Protection Act.
Omollo, who is also the chairman of the National Computer and Cybercrimes Coordination Committee, assured the public of the state’s commitment to protecting national digital infrastructure.
He said Kenya remains focused on enhancing cyber resilience through improved capabilities, better coordination, and continued collaboration with private-sector partners and other stakeholders.
Omollo urged the public and institutions to remain alert and to report any suspicious activity through official channels, including the National Kenya Computer Incident Response Team and Coordination Centre (National KE-CIRT/CC) via email: [email protected] and Hotlines: +254 703 042700 / +254 730 172700.
Kenyans can also report to the National Computer and Cybercrimes Coordination Committee (NC4) via Telephone: +254 716 148 341 and email: [email protected].
Others are the Directorate of Criminal Investigations (DCI) Toll-free line: 0800 722 203 and via Telephone: +254 020 7202000 or email: [email protected].
On Monday, some government websites were taken down by hackers, affecting public services across different ministries.
"Access denied by PCP", "We will rise again," "White power worldwide" and "14:88 Heil Hitler" are some of the messages one is confronted with while accessing some of the platforms.
No group has since claimed responsibility.
Some of the affected departments and ministries include Interior, Health, Education, Energy, Labour and Water and the Gambling Regulatory Authority (GRA).
Others include the Immigration Department, the Directorate of Public-Private Partnerships, the Directorate of Criminal Investigations (DCI), the State House website, the Hustler Fund, the Government Press and Nairobi County.
In one of the websites, the hackers gave their address as pcp@Kenya $ Flat#6, 28 Victoria Park Road, Leicester.
A cyberattack is defined as an attempt by hackers to damage or destroy a computer network or system used by individuals, organisations or agencies, including governments.
