A South African digital forensic investigator in the trial of suspended First Vice President Riek Machar and seven co-accused told the court on Monday that he failed to extract evidence from Machar’s phone and laptop because they were secured with passwords.
Ratlhogo Peter Calvin Rafadi, testifying during the 49th session at Freedom Hall in Juba, said he had no access to Machar’s devices and therefore could not retrieve records linked to the alleged planning and coordination of the military garrison attack in the town of Nasir in March 2025.
Lead prosecutor Ajo Ony’Ohisa Igele asked the expert why he had failed to access the devices belonging to Machar, the fifth accused. Rafadi said: “The reason is that I was not provided with the password for the MacBook laptop, which makes it very difficult to interrogate the device or extract any information pertaining to case number 1533/2025.”
He added that he never opened the evidence bag containing the two devices, explaining that he lacked the tools to break the passwords. “I also considered seeking assistance from other digital forensic experts, but they advised me there are no investigative tools capable of bypassing the password. The only option would have been to send the MacBook to the manufacturer overseas, which I did not do since it was not my evidence,” he said.
Rafadi confirmed that the devices were kept in a safe, inside sealed bags, throughout the investigation.
The expert also summarized evidence concerning the other seven accused. He claimed that Puot Kang Chol, the first accused, used WhatsApp to communicate with actors affiliated with the White Army and SPLA-IO, and allegedly financed White Army activities.
According to messages, General Hokdor Chuol informed Puot Kang of a purchase of PKM machine gun bullets on February 22, 2025. James Chuol Tharjak and Gok Lual are accused of sharing sensitive updates on SSPDF troop and gunship movements.
Gatwech Lam Puoch, the third accused and a Transitional National Legislative Assembly member representing Nasir County, is accused of disseminating information that incited violence.
Lt. Gen. Gabriel Duop Lam, the fourth accused, is alleged to have mobilized White Army and SPLA-IO forces. He reportedly purchased arms on December 10, 2025, and received updates on shelling activity and requests for gunship support. WhatsApp messages also show him acknowledging the dispatch of 500 PKM bullets purchased by Lt. Gen. Marko Juaw at 3,500 SSP each.
Camilo Gatmai Kel, the sixth accused, allegedly shared official statements with Mohammed Ali Youssef, Chairperson of the African Union, and journalists including Justin Lynch and Jean Windahl Pederson. Data from Dominic Gatgok Riak, the eighth accused, reportedly showed no malicious communications except in the Victory Secret WhatsApp group.
Presiding judge James Alala Deng adjourned the hearing to Wednesday, February 11, when the presentation of the forensic expert’s findings is expected to conclude.
Machar and his co-accused face charges including murder, conspiracy, terrorism, treason, destruction of public property, and crimes against humanity.
Prosecutors allege that SPLA-IO forces allied with the White Army killed 257 SSPDF soldiers — including commander David Majur Dak — and destroyed or seized military equipment worth about $58 million during the March 2025 attack on the Nasir garrison.