Milimani law courts has ordered the detention of Halima Ngache for three days to allow detectives to complete investigations into allegations of cyber harassment arising from posts published on an X (formerly Twitter) account that allegedly tracked President William Ruto’s flight movements.

According to an affidavit sworn by Corporal Edwin Metto, a detective attached to the Directorate of Criminal Investigations (DCI) Headquarters’ Serious Crime Unit, investigators are probing an alleged offence of cyber harassment contrary to Section 27(1)(a) as read with Section 27(2) of the Computer Misuse and Cybercrimes Act.

The affidavit states that on or about June 29, 2026, the DCI received intelligence regarding a verified X account identified as “Sholla Ard” (@sholard_mancity). Investigators allege that the account had, on several occasions, published purported flight information, including flight route charts, allegedly relating to the President of the Republic of Kenya.

Police told the court that on June 8, 2026, at 10:06 p.m., the account posted that President Ruto had travelled from Belgium to Norway aboard a chartered private jet bearing registration T7-BBJ2. Investigators further alleged that on June 10, 2026, at 1:06 a.m., the same account claimed that the President had flown from Norway to Finland aboard the same aircraft and stated that it possessed additional information linking the aircraft directly to the President.

According to the affidavit, the account also published another post on June 25, 2026, alleging that the President had left Kenya and that a private jet bearing registration T7-BBJ was heading to Madagascar, where he was expected to board.

Investigators told the court that the motive behind the alleged tracking remains unknown and argued that the publications had caused apprehension regarding the safety of the Head of State and members of the public.

The affidavit further states that, upon arrest, Ngache was found in possession of electronic devices, including a Redmi 13 mobile phone, which investigators intend to subject to forensic examination. Police believe the devices may contain information relevant to the investigation.

The DCI also informed the court that the X account remained active while the suspect was in police custody during her transfer from Mombasa to Nairobi. Investigators argued that this suggested the possible involvement of other individuals and expressed concern that releasing the suspect could interfere with ongoing investigations.

Police sought orders to detain Ngache for seven days to allow investigators to extract data from the seized devices, gather additional evidence, seek information from other agencies, and submit the investigation file to the Office of the Director of Public Prosecutions (ODPP), which will determine whether criminal charges should be filed.

However, the court granted investigators three days to complete their investigations instead of the seven days they had requested.