Cyber Incident Victim: Independent Electoral and Boundaries Commission
Date:
Aug 2017
Location:
Kenya
Summary
The Independent Electoral and Boundaries Commission (IEBC) faced allegations by opposition leader Raila Odinga that its IT systems were hacked to manipulate presidential election results in favor of incumbent Uhuru Kenyatta. Odinga claimed hackers used the identity of a deceased commission IT manager to infiltrate the system and deploy an algorithm altering vote tallies, rejecting provisional results showing Kenyatta leading by nearly 1.5 million votes. The IEBC's chief electoral officer denied any system compromise, stating no formal hacking complaints were received. The accusations triggered sporadic violence, including police confrontations with protesters in Nairobi and Kisumu resulting in at least one fatality, though authorities described incidents as minor. The opposition maintained internal assessments showed Odinga leading, alleging systemic irregularities insufficient to account for the margin.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On August 8, 2017, Kenya held presidential elections between incumbent President Uhuru Kenyatta and opposition leader Raila Odinga. The following day, Odinga publicly alleged that the Independent Electoral and Boundaries Commission's (IEBC) IT systems had been hacked to manipulate election results. He rejected provisional results showing Kenyatta leading with 54.3% of votes versus his 44.8%, based on 96.83% of reporting stations. Odinga claimed his party's internal assessment placed him ahead and described the official results as fraudulent. These allegations triggered sporadic violence, including police shootings at opposition supporters in Kisumu and protests in Nairobi's Mathare slum where one civilian death was reported by witnesses, though government officials denied this fatality. IEBC Chief Electoral Officer Ezra Chiloba immediately countered the hacking claims, stating no system compromise occurred before, during, or after voting and noting no formal complaint had been filed. Government spokespeople characterized the unrest as "minor skirmishes" while urging calm.
Odinga specified that hackers allegedly infiltrated IEBC systems using the credentials of Chris Msando, the commission's IT manager murdered weeks before the election. He asserted hackers deployed an algorithm to alter transmitted results from nationwide tallying centers. The opposition did not provide technical evidence to substantiate these claims during the initial announcement. Security forces responded to protests with live ammunition in some areas, and the Interior Ministry warned of potential social media restrictions if platforms threatened public order. Many Kenyans feared a recurrence of 2007-2008 post-election violence that had caused over 1,100 deaths. With Kenyatta's provisional lead exceeding 1.5 million votes, analysts questioned whether documented irregularities in voter registration could account for such a margin. The IEBC maintained its online results portal reflected unaltered raw data from polling stations while acknowledging imperfections in the voter registry. The standoff persisted pending official certification of results amid heightened security measures and continued opposition challenges to the electoral process.