Nairobi, Kenya — Boniface Mwangi, a well-known advocate for democracy in Kenya and a prospective presidential candidate for 2027, has raised alarms over his personal safety after experiencing a troubling breach of privacy. Following his controversial arrest last July, Kenyan authorities returned his phones but left one without password protection, exposing sensitive personal information to potential government scrutiny.
The phone, primarily used by Mwangi to connect with loved ones and supporters, contained private family photos and communications. This revelation left him feeling vulnerable and “exposed,” intensifying fears he has expressed about ongoing government harassment. In a report released Tuesday, Citizen Lab, which specializes in tracking digital threats against civil rights, stated with high confidence that law enforcement utilized Israeli technology to compromise Mwangi’s phone while it was in police custody during his arrest.
Citizen Lab’s findings suggest that the tools provided by Cellebrite, a company known for its forensic software, may have allowed authorities to access all data stored on Mwangi’s device, including messages, financial documents, and other sensitive information. This incident is part of a disturbing trend where such technologies are allegedly misused by governments to infringe on the privacy of activists and dissenters, according to research from Citizen Lab.
While Cellebrite maintains a process for investigating allegations of misuse and asserting that it takes action against credible reports, concern remains about the company’s technology being exploited in oppressive contexts. The company encourages specific evidence-based concerns to be brought directly to its attention.
The Kenyan authorities did not respond to inquiries regarding the allegations, despite numerous attempts for clarification. After his arrest, which included charges related to illegal possession of ammunition linked to protests, Amnesty International suggested that the legal actions against Mwangi were aimed at stifling lawful dissent.
Mwangi, released on bail shortly after his arrest, continues to face legal procedures; a court appearance is scheduled for Wednesday. He believes that the environment in Kenya is fraught with surveillance tactics, including the collection of information from various sources to monitor his activities and associations.
An earlier investigation by Citizen Lab uncovered that spyware known as FlexiSPY had been installed on the phones of filmmakers involved in a project scrutinizing security forces during protests. This technology also reportedly breached the privacy of those engaged in critical dialogue against the government.
Mwangi emphasized that the actions of technology firms, including Cellebrite, which provide governments with tools to monitor citizens, put lives at risk. He highlighted the devastating implications of these technologies in enabling oppressive governmental strategies.
In a related context, concerns raised by Citizen Lab are part of a broader pattern; similar technology has reportedly been employed against civil society in countries like Myanmar and Jordan. A previous report indicated that Jordanian authorities appeared to use Cellebrite’s capabilities to extract information from activists opposed to the government and supportive of Palestinian causes.
Concerns about the exploitation of such technologies by oppressive governments extend beyond Kenya. According to John Scott-Railton, a senior researcher at Citizen Lab, the pervasive reach of surveillance via smartphones threatens the fundamental rights of individuals to express dissent and hold authorities accountable.