Varsity student charged with hacking journalist’s whatsapp account

A university student has been charged with hacking into a journalist’s WhatsApp account.

The student was arraigned before Mombasa Resident Magistrate Green Odera, where the Director of Public Prosecutions (DPP) preferred multiple charges under the Computer Misuse and Cybercrimes Act, 2018.

According to the prosecution, the accused faces charges of unauthorised access contrary to Section 14(1) of the Act, as well as access with intent to commit a further offence under Section 15.

The court heard that the student allegedly infiltrated the journalist’s WhatsApp account with the intention of committing theft.

"He was also charged with identity theft and impersonation under Section 29 of the Act, for allegedly stealing and using the journalist’s identity to defraud unsuspecting contacts," the DPP stated.

Prosecutors told the court that the student is accused of unlawfully assuming the identity of the journalist and using it to defraud unsuspecting contacts within the victim’s network.

The court further heard that on April 14, 2026, the accused was found in possession of 39 Safaricom SIM card passwords suspected to have been fraudulently acquired and used in theft-related activities.

The student denied all the charges and pleaded not guilty.

Principal Prosecution Counsel Purity Musembi opposed his release on bond, citing ongoing investigations and the risk of interference with evidence.

"The investigating officer informed the court that forensic analysis is being conducted on seized electronic devices," the DPP said in a statement.

Investigators also indicated that the accused may be linked to other similar offences.

The prosecution urged the court to allow more time for investigations to be completed.

Magistrate Odera ordered that the student be remanded at Urban Police Station pending a ruling on the bond application.

Under the constitution, hacking and related cyber offences are governed primarily by the Computer Misuse and Cybercrimes Act, 2018, which provides a legal framework to address unauthorised access to computer systems and digital fraud.

Under Section 14(1) of the Act, unauthorised access is an offence.

This occurs when a person intentionally gains access to a computer system, network, or data without permission.

The law criminalises such conduct regardless of whether any further harm is caused. A person convicted under this provision is liable to a fine, imprisonment, or both.

Section 15 goes further to address unauthorised access with the intent to commit a further offence, such as fraud or theft.

The provision applies where an individual accesses a system with the aim of carrying out a further offence, making it a more serious charge with heavier penalties.

Additionally, Section 29 covers identity theft and impersonation, where a person fraudulently uses another individual’s identity, including digital identities like social media or messaging accounts, to deceive or gain unlawful benefit.