Share and Follow
TUCSON, Ariz. — The case of Nancy Guthrie’s disappearance may hinge on digital evidence that the perpetrator might have inadvertently left behind, according to a digital forensics expert renowned for her role in cracking the Idaho student murder case.
While law enforcement officials have been tight-lipped about the specifics of the evidence they’ve gathered so far, aside from some DNA samples, Heather Barnhart, a seasoned digital forensics analyst associated with Cellebrite and the SANS Institute, suggests that data from cell towers, Wi-Fi logs, and other digital traces could be pivotal in solving the mystery.
“Sometimes, the most telling evidence is the absence of evidence,” Barnhart explained to Fox News Digital.
Drawing from her experience in analyzing the digital devices of Bryan Kohberger, Barnhart emphasized to Fox News Digital that many criminals fail to realize how challenging it is to vanish completely in today’s highly connected world.
Nancy Guthrie went missing from her Tucson residence during the early hours of February 1st, and authorities are treating her disappearance as a suspected abduction. (Fox Flight Team; Courtesy of NBC)
With DNA leads pointing to dead ends so far, it may be digital evidence that moves the case forward.
She pointed to the convicted Idaho killer Kohberger as an example.
“Kohberger literally created bookends around the crime by turning off his device,” she said. “So in addition to all the clearing and other things that he prepped for to erase his digital footprint, the fact that right before the murder, his phone was turned off, and then within like 40 minutes or so after it was turned back on, kind of gave us that tunnel to look down here.”
Law enforcement agents check vegetation areas around Nancy Guthrie’s home in Tucson, Ariz., Wednesday, Feb. 11, 2026. (Ty O’Neil/AP Photo)
Investigators have said little about what kind of digital evidence they’ve recovered so far in the case. The suspect, who may or may not have acted alone, took measures to hide his fingerprints and DNA.
He wore a ski mask, gloves, and long-sleeved clothing and seems to have avoided shedding any traceable genetic material inside Guthrie’s home.
So it may be that, like Kohberger, he and any potential accomplices covered their digital tracks by turning off their phones or placing them in airplane mode.
This image released by the FBI shows an armed individual appearing to have tampered with the camera at Nancy Guthrie’s front door the morning of her disappearance in Tucson, Arizona, Sunday, February 1, 2026. (L) An undated photo of Nancy Guthrie provided by NBC in response to the disappearance of the 84-year-old mother of Today Show host, Savannah Guthrie. (Provided by FBI; Courtesy of NBC)
If that’s the case, investigators can look at behavior patterns in the area and try to find an aberration, Barnhart said. And if they do, that could be the detail that cracks the case.
“If the person prepped, they wouldn’t ping that tower, but if they went ahead of time and scoped it out or planned, they would have,” Barnhart said. “And then you can also look for entry and exit. And then proximity pings, because eventually you’re going to turn your phone back on.”
Law enforcement agents walk around the neighborhood where Annie Guthrie, whose mother Nancy Guthrie has been missing for more than a week, lives just outside Tucson, Ariz. (Ty O’Neil/AP Photo)
Even a temporary blackout can stand out, she said, especially in a quiet residential neighborhood in the early morning hours when most devices would typically remain in one place, with their owners asleep.
And if the abductor did bring their phone but put it on airplane mode, some of their movements may still be traceable, she said. She discovered this while working the Kohberger case, when she crossed timezones and her device, on airplane mode the whole time, pinged in a new location.
Law enforcement agents check vegetation areas around Nancy Guthrie’s home in Tucson, Ariz., Wednesday, Feb. 11, 2026. (Ty O’Neil/AP Photo)
Investigators may also have examined whether a suspect’s phone “touched” Guthrie’s home Wi-Fi network — even without connecting to it — potentially placing the device at the scene.
And traffic cameras are another tool available to investigators, she said. It remains unclear whether authorities recovered helpful footage from them. There are many visible throughout the county.
A Pima County Sheriff’s deputy is involved in a law enforcement operation at the intersection of Camino de Michael and East Orange Grove Road in Tucson, Arizona on Friday, February 13, 2026. The location is approximately two miles from Nancy Guthrie’s home. (DWS for Fox News Digital)
Guthrie is the 84-year-old mother of “Today” co-host Savannah Guthrie. She is believed to have been taken from her home against her will around 2:30 a.m. on Feb. 1, according to the Pima County Sheriff’s Department.
Barnhart said that in the Idaho case, phone logs showed the shutdown was user-initiated and the device was fully charged before going dark — details that helped investigators determine it was deliberate.
“With Bryan Kohberger, he disabled cellular, disabled Wi-Fi and turned off his phone,” Barnhart said. “That is extreme measures to not have a digital footprint. So he really took all the steps but still made a mistake… We hope in Nancy Guthrie, that whoever has her made a mistake and that we can uncover that footprint.”
Savannah Guthrie has asked anyone with information on her mother’s suspected abduction to reach the FBI at 1-800-CALL-FBI.
Related Article
