An armed figure tampered with the security camera at Nancy Guthrie's front door, wore a ski mask, gloves, and long-sleeved clothing, and vanished into the Arizona night with an 84-year-old woman. That was February 1. More than three weeks later, investigators still have not identified a suspect publicly, and authorities have released few details about any evidence aside from DNA samples collected so far.
But a digital forensics expert who helped convict Idaho killer Bryan Kohberger says the suspect's apparent effort to go dark digitally may be the very thing that gives him away.
Nancy Guthrie, the 84-year-old mother of "Today" co-host Savannah Guthrie, is believed to have been taken from her Catalina Foothills home against her will around 2:30 a.m. on February 1, according to the Pima County Sheriff's Department. Investigators are treating the case as an apparent abduction.
An FBI-released image shows the armed individual at Guthrie's front door that morning. By February 11, law enforcement agents were checking vegetation areas around her home. Two days later, a Pima County Sheriff's deputy was involved in a law enforcement operation at the intersection of Camino de Michael and East Orange Grove Road, approximately two miles from Nancy Guthrie's home.
It remains unclear whether authorities recovered helpful footage from traffic cameras. Savannah Guthrie has asked anyone with information to reach the FBI at 1-800-CALL-FBI.
Heather Barnhart, a digital forensics expert with Cellebrite and the SANS Institute who analyzed the phone and computer of Bryan Kohberger, told Fox News Digital that cell tower data, Wi-Fi logs, and other "digital breadcrumbs" could prove critical in the Guthrie case. Her central insight is counterintuitive: what a suspect doesn't do with their phone can be just as revealing as what they do.
The loudest evidence can be the lack of evidence.
Barnhart would know. She walked investigators through the digital trail Kohberger tried to erase before and after the Idaho student murders. His phone went silent at exactly the wrong time, and that silence told a story.
Kohberger literally created bookends around the crime by turning off his device. So in addition to all the clearing and other things that he prepped for to erase his digital footprint, the fact that right before the murder, his phone was turned off, and then within like 40 minutes or so after it was turned back on, kind of gave us that tunnel to look down here.
A phone that goes dark in the middle of the night, in the same window as a violent crime, is not ambiguous. It is a confession written in negative space.
The suspect in the Guthrie case took measures to hide his fingerprints and DNA. That kind of physical preparation suggests someone who planned carefully. But digital preparation is harder to execute perfectly, and Barnhart explained why even methodical criminals leave traces on the edges.
If the person prepped, they wouldn't ping that tower, but if they went ahead of time and scoped it out or planned, they would have. And then you can also look for entry and exit. And then proximity pings, because eventually you're going to turn your phone back on.
This is the fundamental problem for anyone trying to vanish from the digital grid in 2026. You can turn off your phone for the crime itself, but you carried it during the days and weeks you spent planning. You carried it on the drive to scout the neighborhood. You carried it when you left. Every tower your phone touched before the blackout and after it builds a map. The gap in the middle only tells investigators where to look.
Barnhart drove the point home with what she learned from Kohberger's own meticulous failures:
With Bryan Kohberger, he disabled cellular, disabled Wi-Fi and turned off his phone. That is extreme measures to not have a digital footprint. So he really took all the steps but still made a mistake… We hope in Nancy Guthrie, that whoever has her made a mistake and that we can uncover that footprint.
Investigators have said little about the digital evidence they have recovered so far. That reticence is standard in an active case, but it leaves a vacuum that families and the public find agonizing.
What we do know is instructive. The suspect, who may or may not have acted alone, arrived armed and prepared to defeat both physical evidence collection and visual identification. This was not a crime of impulse. The ski mask, gloves, long sleeves, and camera tampering all point to premeditation.
And premeditation, as Barnhart's work on the Kohberger case demonstrated, is precisely where digital forensics finds its richest material. The more a suspect plans, the more digital activity precedes the crime. Reconnaissance trips. Route searches. Location checks. All of it pings towers, connects to networks, and generates metadata that outlasts any single phone shutdown.
Kohberger took every step he could think of and still left enough of a trail to convict him. The question now is whether the person who took Nancy Guthrie from her home in the dark hours of a Tucson morning was any more careful, or whether the digital breadcrumbs are already sitting in a server somewhere, waiting for someone like Barnhart to read them.
An 84-year-old woman is still missing. The phone records don't forget.
