NAKURU, Kenya — The second attack on Rigathi Gachagua’s convoy in Nakuru in as many days should be treated as more than another episode of political heckling. It is a warning that Kenya’s opposition may need to rethink how it plans, secures and conducts political mobilisation ahead of the 2027 election.
The images are becoming familiar; a political motorcade slows down, crowds gather, stones fly, vehicles are damaged and accusations immediately follow about who organised the attackers.
For former Deputy President Rigathi Gachagua, that pattern has now played out twice in Nakuru.
His convoy was attacked in Kaptembwa on Friday 14, August 2025, with photographs showing vehicles with shattered windscreens and windows. Gachagua subsequently accused political actors allied to the government of organising the assault, allegations that could not immediately be independently verified.
On Saturday 15, August 2026, the convoy was attacked again in Salgaa as it travelled towards Rongai. Reports said youths blocked the road and the convoy was subsequently pelted with stones.
Two incidents in two days do not, by themselves, prove that there is a centrally coordinated campaign against Gachagua.
But they do raise a more important question:
What should an opposition movement do when credible warning signs suggest that a political event could become dangerous?
The answer should not be panic, retreat or reckless confrontation.
It should be intelligence, preparation and disciplined security planning.
The first lesson: Don’t wait for the stone to be thrown
Political violence rarely becomes dangerous only at the moment the first stone is thrown.
There are often warning signs beforehand — changes in local political rhetoric, threats on social media, hostile crowds gathering around venues, attempts to disrupt advance teams, unusual mobilisation around a route or credible warnings from local contacts.
That does not mean every hostile message is evidence of a planned attack. It means political organisations should develop a system for collecting, verifying and assessing threats before a leader arrives.
This is where Gachagua and other opposition leaders need to professionalise their operations.
An opposition party should have a dedicated security and risk-assessment function separate from its political mobilisation machinery. Its job should be to establish, before every major event:
- What are the credible threats?
- Who is responsible for venue security?
- What has happened during previous visits?
- Are there emerging tensions in the area?
- What does local leadership know?
- What does the police command say?
- Are there credible warnings that require the programme to be modified?
- What is the contingency plan if the event becomes unsafe?
The objective is not to create a private intelligence agency.
It is to ensure that political mobilisation does not operate blindly in an increasingly competitive environment.
The late Raila’s political career offers an important lesson
Kenya’s opposition history provides a useful case study in the value of political leaders taking security warnings seriously.
The late Raila Odinga operated for decades in an environment where political confrontation could become intensely personal and dangerous.
In October 2002, gunmen fired at a convoy associated with Odinga after a political rally. He was not in the vehicle that came under fire.
A decade later, authorities investigated allegations of a plot to assassinate then Prime Minister Odinga. Kenya’s Director of Public Prosecutions directed police to investigate the claims.
And in March 2023, during anti-government protests, Odinga alleged that his vehicle had been shot at seven times with live ammunition. He presented journalists with damage to his armoured vehicle and described the incident as an assassination attempt. The allegation was widely reported but should be distinguished from a judicial finding that an assassination attempt had occurred.
These episodes illustrate something important about opposition politics in Kenya:
A leader who attracts large crowds and confronts powerful political interests cannot treat security as an afterthought.
Raila’s political machinery also demonstrated the importance of maintaining extensive networks of local political contacts and continuously reading the mood on the ground.
But there is an important distinction.
The lesson is not that Gachagua should imitate every tactic used by Raila.
The lesson is that political leaders need a culture in which credible information is collected, verified and acted upon before a threat becomes an incident.
Gachagua now has a different problem
Gachagua’s challenge is arguably more complicated because he is attempting to build a national opposition vehicle while simultaneously fighting for influence in his former political stronghold.
Nakuru is particularly important.
It is a major electoral battleground, geographically strategic and politically diverse. Gachagua has openly said he needs a substantial share of its vote to advance his presidential ambitions.
That makes his presence there politically consequential — and potentially more contentious.
The temptation for any opposition leader in such circumstances is to respond to hostility by going back harder.
Gachagua has already indicated precisely that approach, saying he would increase his presence in Nakuru rather than retreat after the first attack.
Politically, that may be understandable.
From a security perspective, however, repeating the same movement pattern after a demonstrated security incident without a fresh risk assessment would be irresponsible.
The answer is not to surrender political space.
It is to enter that space better prepared.
The opposition needs an early-warning architecture
There is a legitimate distinction between intelligence gathering for public safety and political espionage.
Gachagua’s team does not need secret agents embedded in government offices.
It needs something much more practical: a structured network of trusted local observers who can report changes in the environment.
That could include party officials, lawyers, journalists, community leaders, venue managers, drivers and local organisers who understand the area.
But information must be verified before it becomes operational intelligence.
One unverified WhatsApp message should never determine whether a political leader cancels an event.
Several independently sourced warnings, however, should trigger a formal security review.
This is where opposition parties can learn from modern crisis-management systems: collect, corroborate, assess, decide and document.
The system should also preserve evidence.
When an attack occurs, photographs, videos, damaged vehicles, witness accounts and other relevant material should be preserved and handed to appropriate investigative bodies rather than allowing political allegations to become the only record of what happened.
Security planning should include the police — but not depend exclusively on them
Kenya’s Constitution protects the right to assemble, demonstrate, picket and petition peacefully and unarmed under Article 37. Courts have repeatedly affirmed that constitutional protection.
That means political parties should expect the state to provide lawful security for political activities.
But opposition parties should not make the dangerous assumption that because police have been notified, everything is automatically safe.
Where there is evidence of escalating hostility, party organisers should formally communicate their concerns to the relevant police command and demand a documented security assessment.
If officers fail to respond adequately, the party has a record showing that it raised the concern before an incident.
That is politically and legally significant.
At the same time, opposition security teams should be trained in de-escalation rather than confrontation.
The objective should always be to get the political leader, supporters and journalists away from danger — not to win a street battle.
The most important tactic may be knowing when to change the programme
This is perhaps the biggest lesson from Gachagua’s latest experience.
A political leader does not have to prove courage by driving directly into an increasingly hostile crowd.
There is a difference between retreating from politics and changing an unsafe operational plan.
A venue can be changed.
A meeting can be postponed.
A programme can be shortened.
A public engagement can be moved indoors.
A motorcade can be rerouted when authorities identify a legitimate security concern.
None of these actions means surrender.
They mean the political organisation has achieved its first responsibility: protecting the people who came to participate in politics.
This is particularly important because a successful attack does not need to kill anyone to achieve its political objective.
Damaged vehicles, injured supporters, cancelled rallies and frightened communities can be enough to create an atmosphere of fear.
But Gachagua must also avoid the intelligence trap
There is another danger.
Once a political movement begins believing that every hostile crowd is part of a sophisticated conspiracy, rumour can become intelligence.
That would be disastrous.
Gachagua’s allegations against political figures following the Nakuru attacks remain allegations unless investigators establish otherwise. Some reports have noted that the claims could not independently be verified.
The opposition therefore needs an independent verification process.
Intelligence should answer questions, not manufacture enemies.
Who organised the crowd?
Who paid them?
Were weapons involved?
Were vehicles used to transport them?
Were there prior communications?
Were police notified?
What did officers do?
Who was injured?
What evidence exists?
Those are investigative questions.
Calling everyone seen at a hostile rally a government agent is not.
The government also has a responsibility
The burden cannot be placed entirely on Gachagua.
If Kenya is serious about preserving democratic competition, the state must ensure opposition politicians can campaign without fear of violence.
The recent Nakuru incidents have already generated competing accusations. Gachagua’s camp has accused political actors of organising attacks, while the National Police Service (NPS) has rejected suggestions that officers work with criminal gangs and said officers found collaborating with criminals would face criminal action.
That is precisely why an independent investigation matters.
The government should welcome such investigations rather than treat every allegation as political propaganda.
A transparent investigation into the Nakuru incidents would establish whether the attacks were spontaneous confrontations, organised political violence or something else entirely.
Kenya has seen where political violence can lead
Kenya does not need reminding of the consequences of allowing political violence to become normal.
The 2007-08 post-election crisis demonstrated how quickly political competition can mutate into widespread violence, particularly when political mobilisation intersects with ethnic identity and organised networks.
The subsequent investigations and international proceedings placed the country’s political violence under unprecedented scrutiny.
That history makes the current political climate particularly sensitive.
A stone thrown at a convoy may appear minor.
But when political actors begin normalising organised disruption, intimidation and retaliation, the threshold for violence can gradually fall.
That is precisely what Kenya must prevent before the 2027 campaign becomes even more intense.
Gachagua’s biggest weapon should be preparation
Gachagua has made clear that he does not intend to retreat.
He has continued campaigning despite the Nakuru attacks, and his political confrontation with President William Ruto is becoming increasingly direct.
But if he genuinely intends to challenge Ruto for the presidency, he needs to think beyond the politics of the rally.
He needs a professional political security culture.
That means credible intelligence networks, threat assessment, communication with security agencies, trained security personnel, emergency medical preparedness, evidence preservation and clear rules for withdrawing from dangerous situations.
It also means working with the media and civil society to document incidents independently.
And crucially, it means ensuring that supporters are not encouraged to retaliate.
The opposition’s strongest response to political violence should be organisation, evidence and lawful political mobilisation.
Not revenge.
The real test begins now
Two attacks against Gachagua’s convoy in Nakuru within 48 hours should not automatically be labelled an assassination campaign.
But neither should they be dismissed as ordinary political rowdiness.
They are warning signs.
The fact that the second incident occurred after the first means Gachagua’s security planners now have something they did not have before; a demonstrated pattern of risk in a specific political environment.
That information should change how future events are planned.
Raila Odinga understood one fundamental reality of Kenyan politics; political survival sometimes depends as much on information and preparation as it does on speeches and votes.
Gachagua now has an opportunity to institutionalise that lesson.
If he wants to reach the 2027 ballot, his greatest security achievement will not be surviving the next confrontation.
It will be preventing the confrontation from happening in the first place.
And if the opposition can combine intelligence-led preparation with disciplined, peaceful political mobilisation, it can protect its leaders and supporters without surrendering the democratic space it is fighting to occupy.
That is the real strategy Kenya’s opposition needs now: not fear, not retreat and not retaliation — but information, preparation, evidence and discipline.
