Cyber Incident Victim: Kenyan Defence Forces
Date:
Jul 2014
Location:
Kenya
Summary
The Kenyan Defence Forces' Twitter account and that of their spokesman were compromised by activists protesting government corruption, with hackers identifying as Anonymous posting threats targeting officials accused of embezzlement and criticizing leadership priorities. The attackers condemned perceived failures in addressing poaching and drug trafficking while alleging protection of elite interests. Military officials confirmed no internal breaches occurred and initiated investigations to identify perpetrators, though the incident highlighted vulnerabilities in official communications amid broader security criticisms facing the administration.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On July 21, 2014, the Twitter accounts belonging to the Kenyan Defence Forces and military spokesman Major Emmanuel Chirchir were compromised by activists identifying themselves as part of the Anonymous collective. The attackers posted messages criticizing the Kenyan government’s handling of corruption, elite protectionism, and inadequate responses to poaching and drug trafficking. One post explicitly threatened, "All of you who have stolen money #Kenya, we are coming after you," while others accused President Uhuru Kenyatta’s administration of prioritizing elite interests over broader national security concerns. Major Chirchir’s account was a known platform for operational updates regarding military engagements against Somalia’s al-Shabab militants, amplifying the breach’s strategic significance. The hackers signed their posts as Anonymous, aligning the incident with the group’s broader pattern of digital activism.
Colonel Willy Wesonga confirmed the breach but clarified that no internal military systems were infiltrated, limiting the incident’s scope to the compromised social media accounts. Kenyan military technicians initiated investigations to identify the perpetrators while the defence ministry worked to regain control of the accounts. The BBC characterized the breach as an embarrassment for the government, occurring amid broader public criticism of its response to security challenges. This incident mirrored prior Anonymous Africa operations, including hacks targeting Zimbabwe’s defence ministry and South Africa’s African National Congress website in 2013. The attack underscored vulnerabilities in official communication channels but did not disrupt core military functions or classified systems. No further details regarding forensic findings or long-term security changes were disclosed in the available reporting.