KRA Warns Public After Official X Account Hacked in Suspected Forex-Linked Cyberattack

By Collins Wasike 

The Kenya Revenue Authority (KRA) has issued a public alert following a cyberattack on its official KRACare account on X (formerly Twitter). The account was reportedly compromised and renamed “StandsX” in what authorities suspect to be a targeted breach linked to forex traders.

According to KRA, the hackers gained control of the account and deleted several official posts before rebranding it. The incident has raised concerns about the growing threat of digital attacks on government institutions, especially those involved in financial oversight.

In a statement released on Friday, KRA urged Kenyans to refrain from engaging with any messages or posts originating from the compromised account. “Any communication from the renamed account is fraudulent and should be ignored,” the authority warned. It emphasized that the breach is being treated with utmost seriousness and that investigations are underway.

KRA confirmed that it is working closely with X’s security team to recover and secure the account. The agency also reassured the public that no taxpayer data was compromised during the incident.

To prevent misinformation, KRA reminded citizens that all official updates and communications will only be issued through its verified social media handles and its official website. The authority encouraged users to report any suspicious activity related to the hacked account and to remain vigilant against potential scams.

This breach highlights the increasing need for robust cybersecurity measures across public institutions, especially as digital platforms become central to service delivery and public engagement. As KRA works to restore its online presence, the incident serves as a stark reminder of the vulnerabilities that exist in the digital age.