FDLE and Homeland Security Investigations Arrest Summerland Key Man on 11 Child Exploitation Counts

The Florida Department of Law Enforcement, working with Homeland Security Investigations, has arrested a Summerland Key man on 11 counts of possession of child sexual abuse material following an investigation that began in February with a review of users on a peer-to-peer file-sharing network. Melvin Donald Ellington, 76, was taken into custody in Monroe County, according to FDLE.

What investigators say happened

According to FDLE, the investigation began on February 17 when agents from Homeland Security Investigations and FDLE conducted a search of users on a peer-to-peer file-sharing network to identify individuals sharing child sexual abuse material. That search identified three IP addresses in the Summerland Key area.

Agents subsequently identified Ellington as the user associated with those addresses. The charges filed are 11 counts of possession of child sexual abuse material, a term Florida law and law enforcement agencies now use in place of the older terminology because it more accurately describes the content as documentation of the abuse of a child.

Ellington is charged and has not been convicted. He is presumed innocent, and the allegations described here are the state's account as presented in the arrest announcement rather than findings by a court.

How peer-to-peer investigations work

Peer-to-peer file-sharing networks operate by allowing users to download files directly from other users' computers rather than from a central server. That architecture, which is what makes the networks resilient, is also what makes them investigable: a user offering a file for sharing is doing so from an identifiable network address.

Investigators use software tools that identify files matching known hash values, digital fingerprints of previously catalogued child sexual abuse material maintained in law enforcement databases. When a file matching one of those hashes is offered for sharing, the tool records the IP address making it available.

From an IP address, investigators obtain subscriber information from the internet service provider through legal process, then seek a search warrant for the physical location. Forensic examination of seized devices follows. The interval between initial detection and arrest, in this case roughly six months, reflects that sequence of legal process and forensic work.

The hash-matching approach has an important limitation worth understanding. It identifies files that have been previously catalogued, which means it detects circulation of known material rather than the creation of new material. Investigations into production, where a child is being actively abused, generally begin from a different starting point, often a tip, a device examination in an unrelated case, or a report from a technology platform.

That distinction shapes how agencies allocate resources. Detection of known material is scalable and can be automated to a degree. Identifying and rescuing children being actively abused requires investigative work that does not scale the same way, and law enforcement agencies weigh their staffing between the two continuously.

FDLE's role in these cases

FDLE operates as Florida's statewide law enforcement agency, handling investigations that cross jurisdictional lines or that require specialized capability local agencies may not have. Digital forensics and internet crimes against children investigations are a substantial component of that portfolio.

The agency works within the Internet Crimes Against Children task force framework, a national network of federal, state and local agencies coordinated through the Department of Justice. Florida's ICAC task forces cover the entire state and route cases to whichever agency is best positioned to investigate.

FDLE has announced multiple arrests in this category during 2026, including cases involving crimes against children in other parts of the state. The agency publicizes these arrests as a matter of practice, both as public information and as a deterrent signal.

The federal partnership

Homeland Security Investigations, the investigative arm of Immigration and Customs Enforcement, has broad authority over transnational crime including child exploitation, and its participation in these cases reflects the international character of the networks involved. Files circulate globally, and cases frequently involve evidence and subjects across multiple countries.

Joint state and federal investigation allows charges to be filed in whichever forum is most appropriate. State charges under Florida law and federal charges under Title 18 both apply to this conduct, and prosecutors coordinate on which venue proceeds. In this case the charges announced are state counts.

Florida's Keys fall within Monroe County, and cases arising there are prosecuted by the State Attorney for the Sixteenth Judicial Circuit if handled at the state level. Federal cases from the Keys are handled in the Southern District of Florida.

Why possession charges are counted individually

Florida law charges possession of child sexual abuse material on a per-item basis, which is why arrests in these cases frequently involve multiple counts rather than a single charge. Eleven counts indicates 11 separately charged items rather than a single act of possession.

That structure has significant sentencing consequences. Each count carries its own statutory penalty, and Florida law permits consecutive sentencing in appropriate cases. The legislature adopted the per-item approach specifically to reflect that each image or video documents the abuse of a real child.

Sentencing outcomes in these cases vary based on the number of counts, the content involved, the defendant's criminal history and whether there is evidence of distribution or production in addition to possession. Distribution and production carry substantially heavier penalties than possession.

What it means for Florida

Cases like this one are not rare in Florida, which reflects both the state's population and the resources the state has committed to detecting them. FDLE and its task force partners have made internet crimes against children a sustained enforcement priority, and the case volume follows from the investigative capacity applied to it.

For parents and caregivers, the practical takeaway concerns the platforms children use rather than peer-to-peer networks specifically. Law enforcement guidance consistently emphasizes conversations about online contact from strangers, awareness of what applications children have installed, and knowing that offenders frequently initiate contact through gaming and social platforms.

Reports of suspected child exploitation can be made to the National Center for Missing and Exploited Children's CyberTipline or directly to FDLE, and reports from the public are a meaningful source of investigative leads alongside proactive detection work.

The evidence chain in a digital case

Cases built on digital evidence follow a chain that defense attorneys examine closely at every link, and the reason is that each step involves an inference rather than a direct observation. Detection software records that a particular internet protocol address offered a particular file. An internet service provider's subscriber records connect that address to an account holder at a billing address. A search warrant then authorizes seizure of devices at that address.

None of those steps by itself establishes who was sitting at the keyboard. An internet protocol address identifies a network connection, not a person, and households, businesses and shared networks can have many users. That gap between the account and the individual is where these cases are most often contested, and it is why forensic examination of the seized devices matters so much to the prosecution.

Device-level forensics can narrow the gap considerably. Examiners look at file creation and access timestamps, user account activity, search history, application usage patterns and whether files were organized in ways that indicate deliberate collection rather than incidental download. Those findings are what typically connect an account to a specific user in court.

Defense challenges in these cases frequently focus on the warrant itself, arguing that the affidavit supporting it did not establish probable cause, or that the search exceeded the warrant's scope. Suppression motions of that kind are litigated before trial, and their outcome frequently determines whether a case proceeds at all.

Monroe County and the Keys

Monroe County covers the entire Florida Keys archipelago along with a portion of the mainland Everglades, a geography that makes law enforcement there distinctive. The county's permanent population is small relative to its land area, roughly 80,000 residents spread along a chain of islands connected by a single highway, and its seasonal population is several times that.

Summerland Key sits in the Lower Keys, between Big Pine Key and Cudjoe Key, roughly 25 miles from Key West. It is a small residential community of the kind that makes up much of the Lower Keys, with a few hundred to a few thousand residents depending on season and a resident profile that skews older than the state average.

The Monroe County Sheriff's Office handles primary law enforcement across the island chain, with substations distributed along the highway. The county's isolation and its single road connection to the mainland shape everything from patrol logistics to evidence transport, and specialized investigative capability is frequently supplied by state and federal agencies rather than built locally.

That is part of why FDLE and Homeland Security Investigations were the agencies announcing this case. Digital forensic examination requires laboratory capacity, certified examiners and software licensing that a small county agency generally cannot maintain, and the state and federal partners supply it across jurisdictions.

The Keys also present a jurisdictional wrinkle that does not arise elsewhere in Florida. Monroe County borders federal waters, hosts a substantial Coast Guard presence, and includes national marine sanctuary and national park lands. Investigations there frequently involve federal agencies from the outset simply because of who is operating in the area.

For residents, the practical significance is that a case originating in a small Lower Keys community was investigated by agencies headquartered hundreds of miles away, using tools and expertise concentrated at the state and federal level. That model, local jurisdiction with state and federal investigative capacity, is how most digital crime is handled across rural and small-population Florida.

What's next

Ellington will proceed through the Monroe County court system, beginning with first appearance and arraignment. The state will need to prove each charged count beyond a reasonable doubt, and the defendant is entitled to counsel and to contest the evidence.

Forensic examination of seized devices frequently continues after an initial arrest, and additional charges can follow if examiners identify further material. FDLE has noted in other cases that investigations remain open after arrest for that reason.

The case file in Monroe County will be the public record of how the prosecution proceeds, including any pretrial motions challenging the search or the evidence derived from it.