Kenyan authorities appear to have used Israeli-made spyware to access the personal phone of prominent pro-democracy activist Boniface Mwangi while he was in police custody last year, according to a report released Tuesday by Citizen Lab. The findings raise concerns about the surveillance of political opponents and the potential for abuse of technology by governments.
Mwangi, who announced his intention to run for president in 2027, had his phone returned to him following his arrest in July 2025 on charges he denies – accusations of distributing money to hire thugs during anti-government protests that resulted in 19 deaths, and unlawful possession of ammunition. He immediately noticed the device was no longer password protected, raising immediate suspicions.
Citizen Lab’s investigation found “high confidence” that Cellebrite, an Israeli technology company, was used to extract data from Mwangi’s phone while it was in the possession of Kenyan police. The technology, researchers say, could have enabled the complete extraction of all materials from the device, including messages, private photos, financial information, and passwords.
The activist, who gained international recognition for documenting the 2007-2008 post-election violence in Kenya, told the Guardian he felt “exposed” and unsafe knowing the contents of his personal phone could be in the hands of the government. He stated he was already operating under the assumption of constant surveillance, and that authorities had likely gathered information about him from other sources prior to his arrest.
“We know that I get spied on all the time. I know that my phone calls are monitored and my messages are read,” Mwangi said.
This is not the first instance of Citizen Lab uncovering the use of surveillance technology against activists and journalists in Kenya. Last year, the same research group found that the FlexiSPY spyware had been installed on the phones of Kenyan film-makers Bryan Adagala and Nicholas Wambugu while they were also in police custody. The two filmmakers were being investigated in connection with a BBC documentary alleging security force involvement in killings during anti-government protests.
The latest findings, according to Mwangi, highlight the role of “non-state actors” in enabling government surveillance of pro-democracy activists. He suggested that by providing the Kenyan government with access to his phone, these companies were jeopardizing his safety.
Cellebrite responded to the report by stating it maintains a “rigorous process for reviewing allegations of technology misuse” and takes “decisive action,” including license termination, when credible evidence is presented. The company declined to comment on speculation and encouraged organizations with concerns to share evidence directly.
Kenya’s police spokesperson and the Kenyan embassy in Washington did not respond to requests for comment.
The allegations against Mwangi, which Amnesty International described last July as part of a “broader effort to intimidate lawful dissent and those committed to upholding the rule of law,” came during a period of heightened political tension in Kenya. He was released on bond and is scheduled to appear in court again on Wednesday, .
Citizen Lab’s report is part of a growing body of evidence suggesting that Cellebrite’s technology is being misused by governments worldwide. Similar concerns have been raised regarding its use in Jordan, where authorities are alleged to have used the technology to extract information from the phones of activists critical of Israel and supportive of Gaza. Reports have also indicated potential misuse in Belarus, Serbia, Kenya, Kenya, and Kenya.
John Scott-Railton, a senior researcher at Citizen Lab, emphasized the importance of protecting personal data on mobile phones, stating, “Your phone holds the keys to your life, and governments shouldn’t be able to help themselves to the contents just because they don’t like what you are saying… When Cellebrite sells their technology to a security service with a track record of abuses, journalists, activists, and people speaking their conscience are at risk.”
Boniface Mwangi launched his presidential bid under the “People Power” banner on , declaring, “If they don’t murder me, I will win the Kenyan presidential election.” His previous political experience includes an unsuccessful 2017 parliamentary bid for the Starehe Constituency under the Ukweli Party, which he founded.
