The Directorate of Criminal Investigations (DCI) has been granted three days to detain a woman suspected of publishing alleged flight movement information related to President William Ruto, as investigators pursue a case of cyber harassment under the Computer Misuse and Cybercrimes Act.
Appearing before Milimani Chief Magistrate Teresia Nyangena, the DCI, through the Serious Crime Unit, sought orders to detain the suspect, Halima Ngache, for seven days at Muthaiga Police Station.
The aim is to allow investigators to conclude their inquiries into the matter.A supporting affidavit sworn by investigating officer Corporal Edwin Metto revealed that the DCI received intelligence on June 29, 2026, regarding a verified X (formerly Twitter) account identified as @sholard_mancity.
This account allegedly published flight route information about the President of Kenya. The investigating officer informed the court that the account purportedly posted on June 8, 2026, claiming that President Ruto had traveled from Belgium to Norway aboard a chartered private jet.
The account allegedly posted on June 8, 2026, claiming that President Ruto had travelled from Belgium to Norway aboard a chartered private jet, stated the officer.
Further, a post dated June 10, 2026, allegedly indicated that the President had flown from Norway to Finland, with the account claiming to possess additional information linking the aircraft directly to the Head of State.
Investigators also alleged that on June 25, the same account published a claim that the President had left the country and was expected to board a private jet destined for Madagascar.
The prosecution emphasized that the motive behind these alleged tracking activities remained unknown and argued that the publications had caused concern for both the President and the public.
“Your Honor, this is in line with investigations related to cyber harassment, contrary to Section 27 (1)(a) of the Computer Misuse and Cybercrimes Act,” stated the investigating officer (IO).
The investigations began following intelligence reports indicating that the suspect had posted several times on the X platform, sharing flight routes, charts, and other related information, including details about the President’s travels.
In one instance, the officer recounted, “On the 8th of June, 2026 at around 10:06 p.m., the said user posted information indicating that the President had left Belgium for Norway, aboard a chartered private flight.”
He added, “Your Honor, once again, on the 10th of June, 2026 at 1:06 a.m., the user went ahead to post that the President had left Norway for Finland. Similar information was also posted on 25th of June, 2026.”
The IO further stated that the publication of this flight information has caused “apprehension among a section of the citizens as well as the person of the Head of State.”
Regarding the suspect’s connection to the account, he said, “Intelligence information has linked the respondent to this particular account that’s under investigation. Yesterday, on 30th June, 2026, she was arrested in Bamburi area of Mombasa, where she was later escorted to Nairobi and placed in custody.”
In her response, the suspect expressed her distress and denied being the one behind the posts. She said, “Mimi, mambo yangu siijisikii vizuri. Nairobi is too cold for me, niko na mgongo, niko na operation, mbona mimi? Like the account they’re saying that is tweeting, is tweeting about the President, my account is different, it’s Mima. And the account they are saying that it’s me, it’s Shola, and it’s still tweeting. And they took my gadgets since the day in the morning. So, how comes I’m here, my gadgets are not here, i don’t have my gadgets, but actually it’s my phone, but the account is still tweeting. Why should they put me in custody for seven days?”Halima pleaded.
She added, “the main thing is mchango wangu nyumbani, and I know mimi nina mtoto mdogo sana. Sijui kama hata anaenda shule, kwa sababu he’s in baby class. Sijui kama saa hizi ameenda shule ama yuko hivi hivi. And I didn’t come with any protective clothes. Nilisema nitavaa kwa baridi, Nairobi is too cold for me.
The investigating officer responded, affirming that the account remains active, with posts continuing since the suspect’s arrest. “Your Honor, we believe this account is being run by more than one person, including the respondent herein. Once she’s released, there is a likelihood that she may tamper with the ongoing investigations,” he said.
When questioned by the magistrate about whether she could have been the one posting since her arrest, the officer clarified, “Since the time she was arrested yesterday up to this morning, she’s not the one making those publications. But before that, we believe she’s the one who was posting.”
The prosecutor supported the application, stating, “I’ve seen there is an allowance to that effect that there may be several administrators running that account. Your Honor, I believe it is with the interest of supporting the investigations that the application be allowed as prayed, so that the investigators can exploit the gadgets they seized and carry out further inquiries into possible co-conspirators.”
In conclusion, the court granted the DCI three days to hold Halima Ngache, pending further investigations, asserting that the period was within a reasonable scope to fully explore the case and prevent tampering.
