Orange County Sheriff’s Department

The Orange County Sheriff's Department is central to the book’s account of how a local agency’s forensic capacity helped turn separate unsolved cases into a connected investigation. Its crime lab processed evidence for multiple Orange County jurisdictions, allowing criminalists to compare cases beyond the boundaries familiar to individual investigators. Later, the Department’s cold-case work and its handling of extensive archived records helped move the investigation from isolated suspicions toward a broader search for an unidentified serial offender.

Regional Role and Forensic Reach

Orange County police departments investigated crimes within their own jurisdictions, but many relied on the Sheriff's Department’s crime lab. That arrangement gave lab criminalists a countywide view that local investigators did not necessarily possess. In the Manuela Witthuhn investigation, Irvine police viewed the murder as unusual; criminalist Jim White, whose work had taken him to crime scenes from Santa Ana to San Clemente, recognized similarities with other cases. The difference in perspective mattered: investigators concentrated on their own case, while a forensic worker who had encountered evidence across the county could notice a recurring pattern.

The lab’s work began at the scene, where evidence had to be collected and preserved under time pressure and with care to avoid contamination. At the Witthuhn residence, White worked with Investigator Veach, who directed him on what to seize. White collected soil near the bed and swabbed a diluted bloodstain in the bathroom. He also participated in documenting observations at the scene. Back in the lab, he compared brown paint from a screwdriver associated with the crime against common commercial paints; his closest match was a store-mixed Oxford Brown made by Behr. The examination produced a specific lead about the paint, while White’s broader experience supplied the cross-case perspective that a laboratory’s ordinary role might not have yielded.

From Similarities to Cold-Case Review

Six months after the Witthuhn murder, White reviewed its evidence and felt it was connected to the murders of Keith Harrington and Patty Harrington. He saw similarities in the victims’ circumstances and in the use of objects found at the homes; in both cases, the weapon was taken away. He also noted evidence of binding in both investigations, while the material itself was missing from the later scene. To White, that difference suggested not simply a repetition, but a possible change in the offender’s practice. He also identified a medical connection among the cases: Keith Harrington had studied medicine at UC-Irvine, Patty had worked nursing shifts at Mercy Hospital in Santa Ana, and David Witthuhn had been a patient at a Santa Ana hospital when his wife was killed. These observations were not yet a DNA identification, but they gave the later review a focused starting point.

The Department’s cold-case effort turned that suspicion into a deliberate program. Between 1972 and 1994, Orange County investigated 2,479 homicides and cleared 1,591, leaving nearly 900 unsolved. The crime lab developed a strategy for reexamining older cases, giving priority to homicides involving sexual assaults because repeat offenders might leave biological evidence suitable for DNA typing. White urged criminalist Mary Hong to prioritize the Harrington and Witthuhn cases, telling her he had long believed the same offender was responsible.

The review eventually reached the murder of Janelle Cruz. A DNA profile developed from that case eliminated the young men who had originally been suspected in her immediate circle and matched profiles from three other murders. Hong was visibly startled by the result. In January 1997, the Sheriff's Department formed the Countywide Law Enforcement Unsolved Element, known as CLUE, to handle the influx of leads. Hong sent the combined profile to hundreds of crime labs around the country, but initially received no response. The match had joined cases; it had not yet supplied the offender’s identity.

Evidence Exchange and Investigative Coordination

The Department’s work depended on evidence moving between agencies as well as within its own lab. In 1998, CLUE investigator Larry Pool asked Ventura police to send surviving forensic material from the murders of Lyman Smith and Charlene Smith to the Orange County Crime Lab. The package contained glass slides, rather than the more extensive biological material investigators would have preferred. Hong nevertheless developed a DNA profile from semen on the slides. The result eliminated Lyman Smith as the source and matched the profiles from the Harrington, Witthuhn, and Cruz cases. A difficult, limited transfer of old evidence thus strengthened the connection that had first been suspected through case similarities.

Pool became the designated point person in Orange County after the larger DNA connection emerged. The scale of the investigation changed sharply: the unified case materials now encompassed thousands of pages and dozens of cases across California. Some officers doubted the unidentified offender could still be alive, but Pool continued to work the investigation. He later served as duty officer at the Orange County Regional Computer Forensics Laboratory, where the book depicts him as a measured, formal investigator rather than someone whose commitment had faded. His persistence connected the early cold-case work to the later, more expansive stage of the search.

The Department’s institutional role also included advocating for broader DNA collection. Pool and Bruce Harrington, the attorney brother of victim Keith Harrington, were instrumental in the passage of California Proposition 69, which established an all-felon DNA database in California in 2004. The expansion reflected their hope that a wider database would identify the offender. Its immediate failure to do so was a disappointment, but it did not end the Department’s investigation or the pursuit of other ways to make the evidence useful.

Records, Technology, and Continuing Work

Decades later, the scale of the Department’s archives became a consequential part of the investigation. In January 2016, Michelle McNamara and Paul Holes were led to a narrow closet at the Sheriff's Department containing sixty-five bankers’ boxes of case files. They were allowed to examine the material under supervision and borrow what they wanted. They selected thirty-five boxes and two large plastic bins, then transported them from the Department’s headquarters in Santa Ana to Los Angeles. The episode illustrates both the value and the practical limits of institutional records: the files existed, but they had to be located, reviewed, and made usable.

The boxes contained reports and supplemental materials, including records that had not been placed in a specific case folder. McNamara and Holes believed that overlooked witness accounts, old suspects, and unexplored vehicle sightings might be among the marginal details worth revisiting. They set up a room in McNamara’s house for the materials and bought two high-volume scanners. Digitizing the documents made them searchable and easier to consult, including by active investigators such as Holes, Ken Clark, and Erika Hutchcraft, who had not seen much of the material. The Department’s access to the archive, combined with the scanning effort, allowed old records to circulate in a more usable form.

Across these episodes, the Department’s significance lies not in a single decisive discovery but in the infrastructure that made discoveries possible: a shared crime lab, a cold-case review strategy, the CLUE unit, interagency evidence exchange, expanded DNA policy, and access to accumulated files. Each function addressed a different obstacle. The laboratory made comparison possible; the cold-case program gave old evidence renewed priority; DNA linked cases that had once appeared unrelated; and the archive offered new material to search. Together, these efforts show how an investigation could persist through institutional divisions, incomplete evidence, and years without an identification.