Citizen Lab Finds Cellebrite-Linked Traces on Kenyan Activist’s Phone
Summary
Citizen Lab found Cellebrite-linked app traces on Kenyan activist Boniface Mwangi’s returned phone after his arrest. Its password protection had been removed, suggesting possible access to private data, but the article does not establish what was accessed.
Key points
- Citizen Lab found indicators of a Cellebrite-linked application, appearing as com.client.appA, on Mwangi’s phone.
- Mwangi said the phone was returned with its password protection removed; the findings suggest possible access but do not establish what authorities accessed.
- Mwangi said the phone contained communications with family and friends and family photos.
- He was arrested amid protests, released on bail, and remains subject to an ongoing criminal case.
- Cellebrite said it investigates credible, substantiated misuse allegations and can terminate licenses; Citizen Lab researchers called for disclosure of sales-approval criteria and license revocations.
- Cellebrite ended its Serbia contract in February 2025 after Amnesty International alleged its technology had been systematically used against civil society.
Article Details
- Victim Organization
- Boniface Mwangi
- Incident Type
- Alleged access to a detained activist’s phone using Cellebrite data-extraction technology
- Data Types Exposed
- Private communications with family members and close friends
- Family photos
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- Mwangi’s phone was returned with its password protection removed. Citizen Lab found traces of an application linked to Cellebrite; the article suggests the phone’s private data may have been accessed but does not confirm that data was extracted.
- Ransom Or Extortion
- None reported
- Claim Status
- alleged
People
Boniface MwangiKenyan activist whose phone was seized and later returned with its password protection removed; he asked Citizen Lab to analyze it and described the communications and family photos stored on it.John Scott-RailtonDigital forensic researcher at Citizen Lab who urged Cellebrite to disclose its sales-approval criteria and license-revocation numbers, and discussed the organization’s findings.
Vendors
Countries
BotswanaCellebrite technology has reportedly been used by authorities in Serbia, Hong Kong, Jordan, Botswana and Myanmar against journalists and activists.Hong KongCellebrite technology has reportedly been used by authorities in Serbia, Hong Kong, Jordan, Botswana and Myanmar against journalists and activists.JordanCellebrite technology has reportedly been used by authorities in Serbia, Hong Kong, Jordan, Botswana and Myanmar against journalists and activists.KenyaMwangi has announced he plans to run for president of Kenya in the 2027 elections and has long been a target of the Kenyan government.MyanmarCellebrite technology has reportedly been used by authorities in Serbia, Hong Kong, Jordan, Botswana and Myanmar against journalists and activists.SerbiaCellebrite technology has reportedly been used by authorities in Serbia, Hong Kong, Jordan, Botswana and Myanmar against journalists and activists.