Nancy Guthrie’s Alleged Abductor May Have Left Crucial Digital Clues, Forensic Expert Says

With DNA leads hitting dead ends, investigators are turning to cell tower data, Wi-Fi logs, and thousands of hours of video footage to find the 84-year-old mother of “TODAY” anchor Savannah Guthrie.

A digital forensics expert who helped put Idaho murder suspect Bryan Kohberger behind bars says the alleged abductor of Nancy Guthrie — the 84-year-old mother of NBC’s “TODAY” co-anchor Savannah Guthrie — almost certainly left a digital trail, even if they tried to erase it.

Guthrie was reported missing from her Tucson-area home on February 1, 2026. Pima County Sheriff Chris Nanos has said he believes she was taken from her residence in the Catalina Foothills neighborhood, possibly in the middle of the night. As of February 28, no suspect has been publicly named, and her whereabouts remain unknown.

With standard DNA testing hitting obstacles, investigators and experts alike say digital evidence — from cell tower records to doorbell camera footage recovered from cloud backup servers — may now be the most promising path forward.

The Abduction: What We Know

Nancy Guthrie was last seen around 9:45 p.m. on January 31, 2026, after dining with family. The following morning, she was expected at a friend’s home in Tucson to watch a church service livestream — something she did most Sundays. When she never arrived, those friends alerted her children, triggering a missing persons investigation that has since grown into a major federal case.

According to the Pima County Sheriff’s Department, conditions inside her home were described as “very concerning” and inconsistent with a voluntary departure. Investigators found bloodstains at or near the entrance; forensic testing confirmed the blood belonged to Guthrie. The department brought in homicide investigators alongside standard search personnel.

Authorities do not believe she left on her own. They have described Guthrie as a vulnerable adult due to her age, limited mobility, and reliance on daily medication — though she had no known cognitive impairments.

“Your Phone Is the Silent Witness”: What Digital Forensics Can Reveal

Heather Barnhart, a digital forensics expert with Cellebrite and the SANS Institute, played a key role in investigating the University of Idaho murders for which Bryan Kohberger was sentenced to four life sentences. She told NBC News that whoever took Guthrie almost certainly left a digital trail — even if they believed they had covered their tracks.

“People forget how much their data spreads across devices. So the same thing that makes investigations hard makes it hard for criminals to clean up.”— Heather Barnhart, digital forensics expert, SANS Institute and Cellebrite, via NBC News

Barnhart explained that cell tower records log every device that connects to a tower, including the device’s identity and movement over time. Investigators can use that data to identify phones that were in the area near Guthrie’s home around the time of the alleged abduction but did not belong to known neighborhood residents — a process sometimes called establishing a “pattern of life.”

“Every time your phone connects to a cell site, there is a record of it, and it’s logged as to what device it is, and eventually, you can track it back to who it belongs to.”— Karl Epps, digital forensics examiner with over 25 years of experience, via KOLD News 13

According to local Tucson outlet KOLD, Sheriff Nanos confirmed that digital forensic teams are reviewing cell tower data to identify devices that appear out of place near the scene during the suspected timeframe. Investigators can then seek warrants to track those devices’ earlier and subsequent movements.

Barnhart also noted that a phone set to airplane mode may still betray its user. While working the Kohberger case, she discovered that her own phone — in airplane mode — pinged a new cell tower when she crossed time zones. Similarly, a device that passes near a Wi-Fi network may leave a trace in that network’s logs, even without actively connecting.

In the Kohberger case, Barnhart pointed out that the killer unintentionally created what she called “bookends” around the crime by switching his phone off just before the murders and back on shortly after — a gap in the data that itself became evidence pointing investigators in the right direction.

“The loudest evidence can be the lack of evidence.”— Heather Barnhart, via Fox News Digital

Eventually, Barnhart said, the digital evidence in the Guthrie case will “paint a picture of truth” — whether it emerges through a license plate reader hit, a tip linked to a social media post, or forensic analysis of a named suspect’s devices.

The Doorbell Camera: A Key Break — and a Complication

One of the biggest early breaks in the investigation came from an unexpected source: a Google Nest doorbell camera at Guthrie’s front door. The camera was physically removed — and presumably taken — during the alleged abduction. Guthrie also did not have a cloud subscription that would automatically save footage.

But investigators working with Google were able to recover images from what FBI Director Kash Patel described as “residual data in backend systems.” The footage, released to the public on February 10, shows a masked individual in dark clothing approaching Guthrie’s porch, attempting to cover the camera with a gloved hand, then using shrubbery to block the lens.

The FBI’s Operational Technology Division analyzed the footage and described the suspect as a male approximately 5 feet 9 inches to 5 feet 10 inches tall with an average build. The suspect was wearing a black 25-liter “Ozark Trail Hiker Pack” backpack — a product sold exclusively at Walmart — and carrying what appeared to be a firearm in a distinctive holster. Savannah Guthrie later shared the footage publicly with the caption: “Someone out there recognizes this person.”

However, the timeline around the footage has been complicated. Two law enforcement sources told NBC News that at least one of the released images was captured on a date before Guthrie disappeared — not the morning of February 1. Sheriff Nanos called that interpretation “speculative.” The Nest camera was disconnected at 1:47 a.m. on February 1, and a person was detected at 2:12 a.m. by another camera inside the home.

The DNA Challenge — and What Comes Next

Investigators collected a glove approximately 2 miles from Guthrie’s home that appeared to match the pair visible in the doorbell camera video. DNA testing on that glove, however, returned no match in CODIS — the FBI’s national database containing more than 19 million offender profiles.

Additional DNA was recovered from Guthrie’s property that does not match her or anyone known to have been there recently. But that sample is “mixed,” meaning it contains genetic material from at least two people, making analysis more complex and time-consuming, according to Sheriff Nanos.

Investigators say they are now exploring forensic genetic genealogy — the same technique that helped identify Kohberger and the Gilgo Beach serial killer. The process involves comparing a forensic DNA sample against profiles in commercial databases like Ancestry.com. Even if the suspect has never personally taken a DNA test, a relative may have — which can narrow the suspect pool dramatically.

Meanwhile, according to CBS News, law enforcement sources say a high-tech “signal sniffer” has been mounted on a helicopter flying low and slow over areas near Guthrie’s home. Such devices can detect low-power electronic signals, including those emitted by medical devices like pacemakers, which could theoretically help pinpoint Guthrie’s location if she is still in the area.

The Investigation: Video, Vehicles, and Thousands of Tips

The FBI has reportedly amassed up to 10,000 hours of video in the investigation, according to a law enforcement official cited by NBC News. Investigators are reviewing footage of vehicles traveling in the Catalina Foothills area, including roads farther from Guthrie’s home, and have asked residents within roughly a 2-mile radius to submit any relevant footage from January 1 through February 2.

FBI Phoenix stated that as of mid-February, the bureau had received more than 13,000 tips from the public. Each tip is reviewed by Threat Intake Examiners at the National Threat Operations Center.

Former Salt Lake City Police Chief Chris Burbank, speaking to NBC News, urged investigators to pursue every angle: “Let’s really start combing every other bit of information that exists out there in the world.” He suggested artificial intelligence could also be used to track down social media leads, noting that people connected to crimes often leave digital traces on social platforms.

In a separate development, a California man was arrested on federal charges in early February after allegedly posing as Guthrie’s abductor and sending ransom demands to her family. Authorities confirmed the scheme was unrelated to the genuine ransom notes received by investigators and media outlets. A judge ordered him released under conditions including electronic monitoring.

Multiple purported ransom notes have been sent to media outlets, and investigators say they are taking them seriously. One letter reportedly referenced the placement of Guthrie’s Apple Watch — a detail that had not been made public. A $6 million ransom demand with a deadline of February 9 was also reported, though the deadline passed without a publicly disclosed resolution.

The Family: “We Still Believe”

Savannah Guthrie — who stepped away from her anchor duties, including coverage of the 2026 Winter Olympics — has released a series of video statements and social media posts appealing for her mother’s return. On February 24, the family announced a $1 million reward for information leading to Nancy’s recovery.

“Please keep praying without ceasing. We still believe. We still believe in a miracle. We still believe that she can come home, hope against hope.”— Savannah Guthrie, via InstagramIn a Friday post, Savannah wrote: “Please — be the one that brings her home,” and reminded followers that tips can be submitted anonymously and that the reward can be paid in cash.

Nancy Guthrie was born Nancy Ellen Long on January 27, 1942, in Fort Wayne, Kentucky. She has lived in the Tucson area for more than five decades. She was widowed in 1988 when her husband Charles died during a mining exploration trip in Mexico. She has three children: Savannah, Annie, and Camron.

Similar Cases: How Digital Evidence Changed Everything

The role of digital forensics in high-profile abduction and murder cases has grown significantly over the past decade. In the University of Idaho murders, Kohberger’s own cell phone data placed him near the victims’ home on the night of the killings and on multiple prior occasions — evidence that became central to the prosecution’s case.

In the 2023 Gilgo Beach serial murder case, investigators used forensic genetic genealogy to identify Rex Heuermann as the prime suspect after decades with no leads. And in the disappearance of Gabby Petito in 2021, a combination of traffic camera footage, cell phone records, and social media analysis helped build a timeline that located her remains.

Experts say the Guthrie case has many of the same ingredients: a masked suspect captured on camera, physical evidence left near the scene, and a wide geographic area that likely generated cell tower and Wi-Fi logs that investigators are now working through.

Frequently Asked Questions

What happened to Nancy Guthrie?

Nancy Guthrie, 84, was reported missing from her home in the Catalina Foothills neighborhood near Tucson, Arizona, on February 1, 2026. Investigators believe she was abducted from her residence, possibly in the early morning hours of that day. Bloodstains at the scene were confirmed to be hers. No suspect has been publicly named as of February 28, 2026.

Who is Nancy Guthrie?

Nancy Guthrie is the 84-year-old mother of NBC “TODAY” co-anchor Savannah Guthrie. She has lived in the Tucson area for more than 50 years and was widowed in 1988. She has three children: Savannah, Annie, and Camron Guthrie.

What does the suspect look like?

Based on FBI forensic analysis of doorbell camera footage, the alleged suspect is described as a male approximately 5 feet 9 inches to 5 feet 10 inches tall with an average build. He was wearing a black Ozark Trail 25-liter backpack (sold at Walmart), dark clothing, a ski mask, and thick gloves. He appeared to be carrying a firearm in a distinctive holster.

What evidence has been collected so far?

Evidence includes: bloodstains at the scene (confirmed to be Guthrie’s); doorbell camera footage showing an alleged suspect; a glove found 2 miles away (DNA did not match CODIS records); additional DNA from the property that does not match Guthrie or known visitors; and up to 10,000 hours of surveillance video from the surrounding area.

How can people help?

The FBI is offering a reward of up to $100,000 for information leading to Guthrie’s location and/or the arrest of those responsible. The Guthrie family is offering an additional reward of up to $1 million. Tips can be submitted anonymously. Those with security camera footage from the Catalina Foothills area between January 1 and February 2 have been asked to submit it to investigators. The reward can be paid in cash.

What are investigators doing right now?

Investigators are reviewing up to 10,000 hours of video footage, analyzing cell tower and Wi-Fi data, pursuing forensic genetic genealogy on DNA samples collected from the scene, and reviewing all tips received. A signal-sniffing device mounted on a helicopter has also reportedly been used to scan the area for electronic signals. The investigation is led by the Pima County Sheriff’s Department with the support of the FBI, U.S. Customs and Border Protection, and other agencies.

What Happens Next

As the investigation stretches into its fourth week, authorities acknowledge they have not publicly identified a suspect or leading theory. The case remains active. Investigators are expected to continue reviewing video evidence and pursuing DNA leads through forensic genetic genealogy. Should a suspect or person of interest be named, digital evidence from their devices — phone, laptop, smart watch — would likely be immediately sought under warrant.

Pima County Sheriff Nanos said earlier this month: “We’re going to find Nancy, and we’re going to find out who did this.” According to NBC News, Guthrie’s family home will be returned to family members as the search moves into its next phase, according to sources familiar with the investigation.

The FBI asks anyone with information to contact the Pima County Sheriff’s Department or submit a tip online. Tips are reviewed for credibility by the National Threat Operations Center. All tips can be made anonymously, and the family reward can be paid in cash.