A South African digital forensic investigator testified Monday that he could not extract any data from devices belonging to suspended First Vice President Riek Machar due to password protection, during the 49th session of the special court at Freedom Hall in Juba.
Ratlhogo Peter Calvin Rafadi, appearing as a prosecution witness, explained he was never provided passwords for Machar’s MacBook laptop and mobile phone. This prevented analysis of potential evidence related to the alleged planning and coordination of the March 2025 attack on the SSPDF garrison in Nasir, Upper Nile State (case number 1533/2025).
Responding to lead prosecutor Ajo Ony’Ohisa Igele, Rafadi stated: “The reason is that I was not provided with the password for the MacBook laptop, which makes it very difficult to interrogate the device or extract any information pertaining to case number 1533/2025.”
He confirmed the devices remained sealed in an evidence bag inside a safe throughout the investigation.
Rafadi noted he lacked tools to bypass the passwords and, after consulting other experts, determined no available forensic methods could unlock them locally.
Sending the MacBook to the manufacturer overseas was the only viable option, which he did not pursue as the devices were not his personal evidence.
The expert then summarized findings from the other seven co-accused:
- Puot Kang Chol (first accused) allegedly used WhatsApp to communicate with White Army and SPLA-IO affiliates and financed White Army activities. Messages included General Hokdor Chuol informing him of a PKM machine gun bullet purchase on February 22, 2025.
- James Chuol Tharjak and Gok Lual are accused of sharing sensitive updates on SSPDF troop movements and gunship operations.
- Gatwech Lam Puoch (third accused, TNLA member for Nasir County) allegedly disseminated inciting information.
- Lt. Gen. Gabriel Duop Lam (fourth accused) is accused of mobilizing White Army and SPLA-IO forces, purchasing arms on December 10, 2025, receiving shelling updates, and acknowledging receipt of 500 PKM bullets bought by Lt. Gen. Marko Juaw at 3,500 SSP each.
- Camilo Gatmai Kel (sixth accused) allegedly shared official statements with AU Chairperson Mohammed Ali Youssef and journalists including Justin Lynch and Jean Windahl Pederson.
- Data from Dominic Gatgok Riak (eighth accused) showed no malicious communications outside the Victory Secret WhatsApp group.
Presiding Judge James Alala Deng adjourned proceedings to Wednesday, February 11, when Rafadi is expected to conclude his testimony.
Machar and his co-accused face charges of murder, conspiracy, terrorism, treason, destruction of public property, and crimes against humanity.
Prosecutors allege SPLA-IO forces, allied with the White Army, killed 257 SSPDF soldiers—including commander David Majur Dak—and destroyed or seized equipment valued at approximately $58 million in the March 2025 Nasir assault.

