September 2026 TorchStone Executive Protection Report
TorchStone Global believes that broader situational awareness and intelligence are key to providing quality executive protection—whether the principal is a Fortune 500 CEO, international celebrity, or local city council member. Our monthly executive protection report catalogues incidents we have captured through our open-source searches that are relevant to the practice of executive protection. We hope the report will serve as a centralized source of threat activity to provide insight into current trends in threats to high-profile individuals.
For more information on customized threat tracking for at-risk individuals, threat assessments, executive protection, or other security services, please contact us.
Contents
Summary
The TorchStone Executive Protection Report tracked 24 domestic and eight international security incidents or updates to prior incidents impacting high-profile individuals during the month of September 2026.
On 24 September 2026, Ben West and Janie Morency presented trends from the first three years of the Monthly Executive Protection Report dataset in a webinar co-hosted by Ontic. In case you missed it, a recording is available here. Four of the trends discussed in the webinar were also reflected in this month’s data: 1) residences remain a primary venue for incidents targeting high-profile individuals; 2) controversial local policy decisions involving data centers and emerging technology continue to produce threats and violence; 3) warning signs often precede attacks and are always worth paying attention to; and 4) proactive protective measures regularly mitigate the potential for greater harm. See below for more details.
- Residences accounted for nine incidents during the reporting period, the highest number among incidents that did not occur through communication channels. In Los Angeles, a gardener at Quentin Tarantino's Hollywood Hills residence witnessed a suspect attempting to enter the second floor on 9 September; the director was not home, and the suspect fled when spotted. The most severe cases of home attacks that took place in September involved loss of life. In Kano, Nigeria, social media influencer and radio employee Ibrahim Khalil was killed at his home on 10 September. Near Mexico City, musician Jonathan Meléndez, his pregnant wife, their 3-year-old daughter, and their nanny were found dead in an apartment. These cases exemplify that residences remain where principals are most exposed.
- Controversial local decisions involving technological advancements continued to generate threats against municipal officials during this reporting period. On 26 August, Minneapolis City Council Member Michael Rainville appealed for community members to stop making threats against him and his family following approval of a proposed data center. On 1 September, Oklahoma City Councilman Matt Hinkle reported that council members had received death threats against themselves and their families after the council narrowly approved renewing the city’s contract for Flock license plate reader cameras. Additionally, on 18 September, Pittsburg, California Councilmember Arlene Kobata reported death threats and said a woman grabbed and shoved her at an event at the Pittsburg Marina; the incident was reportedly linked to opposition to the city’s approved 77-acre data center project. The Pittsburg case suggests that these disputes can escalate from remote threats to physical contact, and similar controversies are being reported in cities across the United States. TorchStone reported on this issue in its April and May 2026 EP Reports.
- Two of this month’s fatal attacks were preceded by reported threats against the victims. Ibrahim Khalil, the Nigerian influencer mentioned above, had reported threats against his life days before he was killed at his home in Kano, and police later detained two suspects. Further, on 19 September, Áncash gubernatorial candidate and journalist Susy Isabel Aponte Polo was shot at point-blank range in Caraz, Peru, while attending a campaign rally. She had reported receiving death threats in the preceding weeks and had accused the leadership of Peru’s Criminal Investigation Directorate (Dirincri) of targeting her. Bystanders helped restrain the gunman until police detained him. In both cases, the victims raised the alarm before the attack. This underscores the importance of treating reported threats against principals, especially those with limited physical protection, as grounds for immediate security escalation.
- Lastly, this month we saw how protective measures limited the severity of several incidents. On 11 September, a trespasser entered former Vice President Kamala Harris and Doug Emhoff's Malibu property while neither was home, but private security stopped the individual before they reached the house. Sheriff's deputies warned the person to leave, a trespassing report was filed, and deputies increased patrols in the area. Additionally, on 26 September, three masked individuals tried to open the front door of actress Monet Mazur’s Hollywood Hills home, but the security alarm activated and they left without entering. In both cases, protective measures established in advance limited the potential for a more harmful outcome.
Please find the full list of incidents categorized below. 
Business Executive
Location: New York, NY Tactic: Attack Venue: Public Area
01 September 2026: A 32-year-old Bank of American Vice President died from stab wounds suffered from a midday attack in Times Square. Police responded to the scene and killed the attacker, identified as a 49-year-old woman with a history of mental health issues, after she lunged at officers with a knife. There were no indications the assailant specifically targeted the victim. One other man suffered wounds from the unprovoked attack, but he was in stable condition.
Celebrity
Location: Palm Beach, FL Tactic: Verbal/Written Threat Venue: Communication Channels
04 August 2026: A 29-year-old man from Horton, Kansas, was reported to be jailed in Palm Beach County, Florida, facing 23 counts related to written or electronic threats to kill or cause bodily harm against President Donald Trump and other political figures. Investigators said Strube admitted to posting the threats on social media, which allegedly targeted President Trump, Israeli Prime Minister Benjamin Netanyahu, Joe Rogan, and Ben Shapiro.
Location: New York, NY Tactic: Verbal/Written Threat Venue: Public Area
31 August 2026: A Manhattan hotel reported a threatening email addressed to the singer, Pink (Alecia Moore), that referenced her newly purchased Greenwich Village townhouse. The author of the email requested that the message be passed onto Pink. Police did not specify the details of the threatening email to the media. The specific hotel is unknown, but is also reportedly located in Greenwich Village.
Source:
Location: Mexico City, Mexico Tactic: Attack Venue: Home
01 September 2026: Mexican musician Jonathan Meléndez, his pregnant wife, their 3-year-old daughter, and their 21-year-old nanny were found dead in an apartment near Mexico City, with authorities reporting that several victims had been shot and some had their hands bound. The couple’s 6-year-old son was found alive and unharmed. Two men were arrested in connection with the killings, including an associate of Meléndez who allegedly used his relationship with one of the victims to enter the home.
Location: Villepinte, France Tactic: Stalking Venue: Communication Channels
11 April 2026: Real Madrid and France star Kylian Mbappé was among 26 people targeted by an alleged criminal network planning kidnappings in France. Investigators discovered the list on the phone of an 18-year-old suspect accused of running the organization from prison, and authorities are still investigating how far the planned kidnappings progressed, with no indication that any plot targeting Mbappé was carried out.
Location: Los Angeles, CA Tactic: Other Crime Venue: Home
09 September 2026: Police responded to a report of a burglary attempt at Quentin Tarantino's Hollywood Hills residence. A gardener witnessed the suspect attempting to enter the residence's second floor around 1200hrs; the director was not in the residence at the time of the incident. According to police, the suspect did not enter the residence and fled the scene after being spotted. Police were unable to locate the suspect, described as a 35-year-old male wearing all-black clothing.
Location: Kano, Nigeria Tactic: Attack Venue: Home
10 September 2026: 57-year-old social media influencer and radio employee Ibrahim Khalil, known as Danshagamu, was killed at his home in the Gaidar quarter of Kumbotso Local Government Area, Kano, Nigeria. Khalil had reported threats against his life days earlier, and police later detained two suspects in connection with the attack as they continued to investigate the motive
Location: Mae do Rio, Brazil Tactic: Attack Venue: Home
16 September 2026: Two men reportedly broke into a home in Mãe do Rio, Brazil, dragged Brazilian influencer Evelyn Lima Dantas, 21, outside, and fatally shot her multiple times. Police believe the killing may be connected to her previous arrest in July in an investigation into the death of a local police sergeant, and authorities are investigating possible involvement by a criminal faction.
Location: Chicago, IL Tactic: Other Crime Venue: Home
30 June 2026: On 22 September, Olympic gymnast Simone Biles revealed in a TikTok post that three masked intruders stole a luxury vehicle from her Chicago-area residence several months ago. Though Biles did not provide details the claimed incident, she said the vehicle was eventually recovered. The Porsche belonged to her and her husband, NFL player Jonathan Owens.
Location: Los Angeles, CA Tactic: Other Crime Venue: Home
26 September 2026: Three masked individuals reportedly approached actress Monet Mazur’s Hollywood Hills home and tried to open the front door. The security alarm activated, prompting them to leave before entering. Police said an individual was inside the home, but disputed reports that Mazur confronted the group. No property was stolen, and no injuries occurred. LAPD is investigating, and no arrests have been reported.
Federal Government
Location: Moldova Tactic: Attack Venue: Restricted Area
08 September 2026: Ukrainian President Volodymyr Zelenskyy’s plane was almost hit by a drone while taking off from Moldova on his way to Norway for King Harald V’s funeral. Norway’s prime minister described the incident as a near miss, while a Ukrainian presidential source said there was an alert after a Russian drone entered Moldovan and Romanian airspace but called claims that Zelenskyy was personally at risk exaggerated.
Location: Malibu, CA Tactic: Stalking Venue: Home
11 September 2026: A trespasser entered former Vice President Kamala Harris and Doug Emhoff’s Malibu property while neither was home, but private security stopped the person before they reached the house. Sheriff’s deputies later warned the individual to leave, and the person left voluntarily; no arrest was made, though a trespassing report was filed, and patrols in the area were increased.
Location: Søborg, Denmark Tactic: Stalking Venue: Home
16 September 2026: A hobby drone found near Danish Defense Minister Jeppe Bruus’ home in Søborg, north of Copenhagen, prompted a major police and military response. Bomb disposal specialists, forensic officers, and a military robot were deployed, but police determined the drone was harmless and posed no danger to residents; the incident is still being investigated.
Source:
Location: Eddington, Maine Tactic: Verbal/Written Threat Venue: Communication Channels
16 September 2026: A 52-year-old Eddington, Maine resident was sentenced to three years of supervised release after being found guilty of making online threats against Jewish people, Kamala Harris, Elon Musk, and Maine law enforcement. He was sentenced to time served, about 17 months, after FBI agents found numerous swords at his home, and records showed he had previously been involved in multiple standoffs in Eddington and Old Town.
Location: NYC, NY Tactic: Other Crime Venue: Public Area
22 September 2026: Heightened security during the United Nations General Assembly in New York City caused major traffic disruptions around U.N. headquarters. A suspicious package reported near East 43rd Street and Third Avenue prompted NYPD officers, the bomb squad, and a Homeland Security Investigations agent to respond, but authorities determined the package was harmless.
Location: Washington, DC Tactic: Harassment Venue: Office
19 September 2026: Michigan Senate Democratic nominee Abdul El-Sayed condemned harassment directed at U.S. Rep. Haley Stevens after an anti-Israel activist followed her to her car in Washington, D.C., calling her a war criminal and saying, “We will see you at the gallows.” Several Michigan Democrats also condemned the “gallows” rhetoric, while the activist later defended his comments and said they were taken out of context.
Location: Brevard County, Florida Tactic: Verbal/Written Threat Venue: Communication Channels
23 September 2026: 26-year-old Massachusetts man, was sentenced to 9 years and 11 months in federal prison and fined $15,000 after pleading guilty to threatening Rep. Randy Fine and his family. The threats were made through social media between August 10–15, 2024, while he was in Spain, and included antisemitic posts and threats directed at Fine’s two sons; investigators later obtained a confession from him after he returned to the U.S.
State Government
Location: Fort Worth, TX Tactic: Verbal/Written Threat Venue: Communication Channels
12 August 2026: The Democratic nominee for Texas’ U.S. Senate race, James Talarico, was the target of multiple threatening messages in early August. Police arrested a Fort Worth man accused of sending them. According to Talarico’s chief of staff, the campaign began receiving threats via email and through Instagram. Texas authorities questioned and eventually arrested the man they suspect of sending the messages, who said that he only wanted to “scare” Talarico and did not intend to hurt anyone. The suspect also admitted having access to several firearms. James Talarico currently serves as a State Representative but is campaigning for the U.S. Senate.
Location: Austin, TX Tactic: Verbal/Written Threat Venue: Communication Channels
21 August 2026: Texas authorities arrested a 36-year-old Houston man after he was accused of leaving two threatening voicemails at Gov. Greg Abbott’s office, including threats to kill him. Investigators traced the phone number to the supect through Verizon, and the threats led to a charge of making a terroristic threat against a public servant, as they caused staff to fear serious bodily injury.
Location: Harrisburg, PA Tactic: Verbal/Written Threat Venue: Communication Channels
3 September 2026: A threatening voicemail was left at Pennsylvania Gov. Josh Shapiro’s office in which the caller allegedly threatened to “destroy the Commonwealth” and mentioned Shapiro and Lt. Gov. Austin Davis. Police identified the caller as a 38-year-old male, who was arrested and charged with terroristic threats, harassment, and disorderly conduct before later posting bail.
Location: Canfield, OH Tactic: Attack Venue: Public Area
06 September 2026: An armed man approached Ohio Democratic gubernatorial candidate Amy Acton at the Canfield Fair and allegedly pushed through a crowd toward her, injuring two people in the process. Police arrested a 38-year-old male and recovered two handguns, brass knuckles, and a Taser, though investigators said he did not brandish the weapons; he was charged with disorderly conduct and two counts of assault.
Location: Guadalupe County, TX Tactic: Verbal/Written Threat Venue: Communication Channels
15 September 2026: Texas DPS arrested San Antonio man over alleged terroristic threats made on social media against Republican state representatives Jeff Leach and Lacey Hull. The suspect was taken into custody in Guadalupe County, Texas, on an outstanding warrant, where authorities discovered he was also wanted in Collin County for the alleged threats.
Location: Phoenix, AZ Tactic: Verbal/Written Threat Venue: Communication Channels
18 September 2026: A 40-year-old Arizona man was arrested after allegedly sending threats to kill Gov. Katie Hobbs and run over children at BASIS Chandler Primary North. Police tracked him to his home in Chandler using phone location data, and he was arrested and booked on a felony charge of making a terrorist threat.
Local Government
Location: Minneapolis, MN Tactic: Verbal/Written Threat Venue: Communication Channels
26 August 2026: Minneapolis City Council Member, Michael Rainville, appealed for members of the community to stop sending threats against him and his family in response to approval of a proposed local data center. Rainville did not go into detail on the threats but emphasized that he must take the safety of himself and his family into consideration when determining his community interactions.
Location: Oklahoma City, OK Tactic: Verbal/Written Threat Venue: Communication Channels
01 September 2026: Oklahoma City Councilman Matt Hinkle revealed that he and his fellow council members had received death threats to themselves and their families over the city’s use of Flock license plate reader cameras. The city council had recently narrowly approved renewing the city’s contract with Flock, despite opposition from citizens. Similar controversies and threats are being reported in cities across the United States.
Location: Jackson, NJ Tactic: Harassment Venue: Office
18 September 2026: The Jackson Township Mayor was reported to be receiving death threats, misogynistic and antisemitic Facebook messages, threatening voicemails, and an unsigned package containing vulgar novelty items. Jackson Township police were investigating the threats, which reportedly included a 90-second voicemail in which a man repeatedly used a misogynistic slur, referenced Nazis, Saddam Hussein and Israeli Prime Minister Benjamin Netanyahu, and told Kuhn to leave the country; the threats were reportedly sent to her township office and personal business.
Location: Dearborn, MI Tactic: Verbal/Written Threat Venue: Communication Channels
17 September 2026: Two Metro Detroit residents are facing charges after they allegedly threatened elected officials, including the Dearborn mayor and the Michigan Supreme Court. The charges were announced on 21 September and include: one count of true threat of hate crime, eleven counts of false report of a threat to commit terrorism and one count of using a computer to commit a crime.
Location: Trinity, NC Tactic: Verbal/Written Threat Venue: Office
17 September 2026: Trinity City Council member Edward Lohr, 77, was arrested after allegedly threatening to shoot fellow council member and mayor pro tempore Robbie Walker. Lohr allegedly made the threat to the city manager and was later released on a $1,000 bond with conditions prohibiting contact with Walker or other council members and restricting him from town property.
Location: Pittsburg, CA Tactic: Harassment Venue: Office
18 September 2026: Pittsburg, California Councilmember Arlene Kobata says she received death threats and was assaulted by a woman who grabbed and shoved her at a First Friday event at the Pittsburg Marina. The incidents were reportedly connected to opposition to the city’s approved 77-acre data center project, with Kobata and others also receiving harassing emails and threats.
Community Leader
Location: Israel Tactic: Verbal/Written Threat Venue: Home
17 September 2026: The documentary NAZA sparked political controversy in Israel after its directors, Yuval Abraham and Rachel Szor, and their families' received threats and intimidation following the film’s release. The film, which features anonymous Israeli military sources discussing alleged mass killings of civilians in Gaza, was condemned by Israeli political figures, while Prime Minister Benjamin Netanyahu said he planned legislation targeting people who “defame IDF soldiers.”
Location: Macon, GA Tactic: Verbal/Written Threat Venue: Office
4 February 2026: North Carolina man Ariel Collazo Ramos was sentenced to five years in prison for mailing antisemitic and threatening postcards to Macon Rabbi Elizabeth Bahar and Georgia State Rep. Esther Panitch. The postcards included Nazi references and antisemitic imagery, and Ramos will also serve three years of supervised release with limited computer access after his prison sentence.
Location: Caraz, Peru Tactic: Attack Venue: Public Area
19 September 2026: A gunman fatally shot Áncash gubernatorial candidate and journalist Susy Isabel Aponte Polo point blank in the back of her head as she traversed Caraz' market square during her appearance at a campaign rally. Police detained the shooter shortly after his attack, assisted by bystanders who restrained him. Aponte Polo reported receiving death threats in the weeks prior to her assassination and accused the leadership of Peru's Criminal Investigation Directorate (Dirincri) of targeting her.
Subscribe Today
TorchStone has launched a monthly newsletter to notify readers when our EP Reports go live. Subscribe here to join our mailing list.