29/06/2026
Breach Brief #1: Eight Ministries, One Morning, Zero Warning
On the morning of 17 November 2025, Kenyans trying to reach Interior, Health, Education, ICT, Labour, Environment and Tourism government websites found something else waiting for them. Those website including State House, Immigration, the DCI, and the Hustler Fund portal were all down or altered and their pages replaced with neo-Nazi slogans.
A group calling itself PCP@Kenya claimed responsibility. This was a breach of the Computer Misuse and Cybercrimes Act, the Kenya Information and Communications Act, and the Data Protection Act.
No sensitive data was confirmed lost. What the incident actually exposed was how much of government's public face now runs on infrastructure that wasn't built to withstand a coordinated hit. Although services were restored within hours. The underlying gap won't close that fast.
This is the exact pattern ACDF exists to interrupt. Not just bigger cybersecurity budgets, but the incident response playbooks, cross-agency coordination, and public-sector resilience that turn "we got defaced for six hours" into "we never went down."
This is the kind of incident our public-sector and critical infrastructure resilience sessions are built around. Join us in Nairobi from 2–6 November for ACDF 2026.
Grab your CyBoma Pass before they run out. https://africacyberdefenseforum.com/product/cyboma-pass/
