August 2026 TorchStone Executive Protection Report
TorchStone Global believes that broader situational awareness and intelligence are key to providing quality executive protection—whether the principal is a Fortune 500 CEO, international celebrity, or local city council member. Our monthly executive protection report catalogues incidents we have captured through our open-source searches that are relevant to the practice of executive protection. We hope the report will serve as a centralized source of threat activity to provide insight into current trends in threats to high-profile individuals.
For more information on customized threat tracking for at-risk individuals, threat assessments, executive protection, or other security services, please contact us.
Quick Links
Summary
The TorchStone Executive Protection Report tracked 16 domestic and 12 international security incidents or updates to prior incidents impacting high-profile individuals during the month of August 2026. Below are some key incidents of note over the past month.
- In early August, two executives connected to European first-person-view (FPV) drone manufacturing were targeted within a 24-hour period. On 4 August, a car explosion seriously injured Vladimir Tkachuk, director of Uraldronzavod, a Russian facility producing Upyr FPV drones for the Russian military. The following day, German authorities disrupted an alleged plot to assassinate Stefan Thumann, head of drone manufacturer Donaustahl, after identifying surveillance of his residence and company facilities dating back to December 2025. Officials assessed that the operatives behind the Thumann plot were acting on behalf of a Russian intelligence service, likely in response to Donaustahl’s role supplying drones to Ukraine. These incidents point to executives across the European FPV drone supply chain as an emerging target set tied directly to the war in Ukraine, warranting continued monitoring for similar activity against comparable firms.
- This month’s data reflects a continued pattern of violence against social media influencers, a population that typically lacks access to the security infrastructure available to traditional celebrities, corporate executives, and political principals. In Culiacán, Mexico, 23-year-old TikTok influencer César Gastélum was shot and killed by two armed assailants while livestreaming outside a restaurant, an attack that investigators have linked to broader cartel violence in the region. In Saint-Gilles, France, TikTok influencer Sonia Bellina was found dead in a vineyard after going missing earlier in the month, prompting a murder inquiry and the arrest of two suspects. A third incident in Maicao, Colombia, saw social media influencer Angie Paola Argáez Núñez abducted from a private property by multiple armed assailants. These cases illustrate a growing exposure gap: influencers often maintain the public visibility and reach of traditional high-profile figures without the protective resources, threat monitoring, or residential security typically afforded to executives or celebrities of comparable prominence.
- A recurring driver of threats against local government officials this month was community opposition to proposed data center developments. In Salix, Iowa, city leaders canceled a city council meeting after receiving threatening messages on social media tied to a contentious data center proposal, opting to postpone rather than risk confrontation at the scheduled session. Days later, in Marshall, Michigan, local police opened an investigation into "credible" death threats against multiple city council members stemming from a similar dispute over a proposed data center in the area; several council members publicly condemned the threats and called for more civil discourse. As TorchStone has documented in previous monthly reports, data center development is becoming a flashpoint for hostility toward local officials nationwide.
Please find the full list of incidents categorized below.
Business Executive
Location: Bolshoy Istok, Russia Tactic: Attack Venue: Public Area
04 August 2026: A car explosion seriously injured Vladimir Tkachuk, director of Uraldronzavod, a Russian military drone manufacturing facility. The plant produces Upyr first-person-view drones for the Russian military. Authorities have not identified the cause of the explosion or those responsible. The incident marks the latest attack involving Russian military and defense-related personnel since the conflict in Ukraine began.
Location: North Rhine-Westphalia, Germany Tactic: Stalking Venue: Home
05 August 2026: German authorities disrupted an alleged plot to assassinate Stefan Thumann, head of first-person drone manufacturer Donaustahl. German intelligence received a warning from a foreign partner in December 2025 and subsequently identified surveillance of Thumann’s residence and company facilities. Authorities arrested two suspected operatives in Germany and Spain after investigators linked them to surveillance conducted between December 2025 and March 2026. Officials assessed that the suspects acted on behalf of a Russian intelligence service, while other operatives would have conducted the assassination. Thumann’s role in supplying drones to Ukraine likely made him a target of Russian efforts to disrupt European military support for Kyiv.
Location: New York, NY Tactic: Harassment Venue: Office
10 August 2026: A homeless man confronted Roc Nation CEO Desiree Perez outside the company's headquarters in Chelsea, New York. The suspect reportedly told Perez that "you are going to die."
Location: Buenos Aires, Argentina Tactic: Harassment Venue: Home
18 August 2026: Protestors dressed as Lord of the Rings character Gandalf staged a protest outside billionaire technology investor Peter Thiel's Buenos Aires residence. The protest appeared motivated by opposition to Thiel’s business activities and Palantir’s broader association with data and surveillance technology.
Celebrity
Location: Geneva, Switzerland Tactic: Attack Venue: Home
10 May 2026: Swiss authorities reported 18 violent robberies of occupied homes in 2026, including one which targeted Formula 1 champion Alain Prost in early May. Robbers reportedly assaulted his family and forced them to forfeit valuables from a safe. Thieves typically exploit access to the nearby open border with France, which limits law enforcement's ability to respond. While affluent homes in Geneva have long been targeted, the recent uptick in “home jackings” reflects increasingly brazen tactics employed by criminal networks based in France.
Location: Culiacán, Sinaloa, Mexico Tactic: Attack Venue: Public Area
04 August 2026: Two armed men on a motorcycle shot and killed 23-year-old TikTok influencer César Gastélum while he livestreamed outside a fast-food restaurant in Culiacán, Sinaloa, Mexico. The attack, which was partially captured on the livestream, killed Gastélum at the scene. Authorities continue to investigate the incident and have not identified a motive or suspects. The killing reflects ongoing cartel-related violence in Sinaloa, where rival criminal groups have driven a sustained increase in homicides and attacks on public figures, including social media influencers.
Location: Kampala, Uganda Tactic: Attack Venue: Home
04 August 2026: David Owori, captain of Ugandan football club Sports Club Villa, died after robbers attacked him near his home in Kampala. Police stated the suspects attempted to steal Owori’s mobile phone and other belongings, fatally assaulting him after he resisted. Owori succumbed to his injuries the following day. The robbers remain unidentified, and an investigation is ongoing.
Location: Hidden Hills, CA Tactic: Other Crime Venue: Home
09 August 2026: Los Angeles County Sheriff's Department personnel arrested a suspect after a residential burglary call at a home owned by Kim Kardashian. The suspect was seen driving a vehicle from the property in the area. When deputies arrived, they found a man inside the home and took him into custody without incident. The man was booked on suspicion of burglary and taking a vehicle without the owner’s consent, police said. The Kardashians were not present at the time of the incident, which highlights the risk of trespass and burglary to unoccupied luxury residences.
Location: Maicao, Colombia Tactic: Attack Venue: Home
10 August 2026: Assailants abducted social media influencer Angie Paola Argáez Núñez from a private property. Reports stated that three or four armed assailants forcibly removed Argáez from the property at approximately 2:30 AM and fled in her SUV. An investigation is ongoing.
Location: Houston, TX Tactic: Stalking Venue: Restricted Area
11 August 2026: Rapper Don Toliver abruptly ended his concert at the Toyota Center in Houston, TX after security found a firearm on a concertgoer. Police said a 30-year-old man entered the arena but was flagged by security after he went through a metal detector with the gun. Police took the suspect into custody and booked him at the Harris County Jail. The incident highlights the importance of strong perimeter security and control checkpoints during large public events.
Location: Saint-Gilles, France Tactic: Attack Venue: Home
12 August 2026: TikTok influencer Sonia Bellina was found dead in a vineyard after she disappeared earlier in the month. Authorities opened a murder inquiry and arrested two men after identifying evidence that indicated their direct or indirect involvement. One suspect was released, while the other remains under investigation.
Location: Makhachkala, Russia Tactic: Attack Venue: Home
17 August 2026: A stalker attacked musician Khadizha Magomedova at her home. The stalker reportedly broke into Magomedova’s residence, threatened her, and physically attacked her before authorities arrested him. The stalker fixated on Magomedova for at least two years prior to the attack. Investigators subsequently released the suspect, despite the reported break-in and assault, while continuing to examine the case.
Federal Government
Location: Rancho Palos Verdes, CA Tactic: Stalking Venue: Public Area
01 August 2026: LA County Sheriff’s Deputies arrested a man acting suspiciously at Trump National Golf Club ahead of President Trump’s planned visit there. Federal agents observed the suspicious individual “appearing to monitor security-planning activities” ahead of the president’s visit. A subsequent investigation into the suspect recovered “an illegally modified AR platform rifle, additional firearms, body armor, ammunition, [and] notebooks containing concerning statements."
Location: Santander de Quilichao, Colombia Tactic: Stalking Venue: Public Area
05 August 2026: Colombian national police thwarted an attempted attack ahead of the inauguration of President Abelardo de la Espriella. The Defense Minister attributed the plot to dissident FARC factions. Authorities intercepted a bus carrying an explosive device that likely could have caused significant damage if it had successfully detonated. Police also arrested a 21-year-old woman carrying explosive material and detonators.Source:
Location: Halifax, Nova Scotia, Canada Tactic: Stalking Venue: Office
10 August 2026: Authorities evacuated areas of central Halifax after a man threatened to bomb the U.S. Consulate there. An investigation discovered a car parked near the consulate containing a propane tank and containers of flammable liquids. The Explosive Disposal Unit also removed a suspicious bag nearby. A short time later, police located and arrested a 54-year-old man who was eventually charged for making the threats.
Location: Florence, KY Tactic: Verbal/Written Threat Venue: Communication Channels
14 August 2026: A federal judge sentenced a 55-year-old Kentucky man for making threats against law enforcement officers and U.S. Rep. Thomas Massie. The threats targeted Rep. Massie’s Washington D.C. offices from February 2023 – May 2025. In one of the harassing calls, the man enquired about Rep. Massie’s next town hall meeting so that he could “shoot [him] in the head”. The original indictment was unsealed in January 2026, but Rep. Massie was not identified as a target in the original charges.
Location: Orlando, FL Tactic: Verbal/Written Threat Venue: Communication Channels
18 August 2026: Authorities arrested a 26-year-old in Columbus, OH after he sent a threatening email to a U.S. Congressman’s office in Florida. A federal criminal complaint alleged that the suspect threatened the murder the congressman and his family in the email. Authorities arrested him one week later.
Location: New York, NY Tactic: Verbal/Written Threat Venue: Communication Channels
24 August 2026: Iranian state TV claimed that the Iranian government had a $10 million bounty on President Donald Trump’s son, Barron Trump. A widely broadcast video showed the location of Barron’s university and claimed that his movements were “fully monitored”. Publicizing the threat to Barron Trump suggests that there is no active plot against him, as Iran would not want to compromise a pending attack by drawing extra attention on the target.
State Government
Location: Hamilton County, OH Tactic: Verbal/Written Threat Venue: Communication Channels
17 December 2025: Authorities charged an Ohio man in August 2026 related to terroristic threats he made against Ohio State Representative, Mark Gillen, in December 2025. According to a police affidavit, the accused individual left a voicemail at Rep. Gillen’s district office, threatening that “if Pennsylvania thinks they're going to come after our guns ... blood will roll. You get it?"
Location: Olympia, WA Tactic: Stalking Venue: Home
19 July 2026: Local authorities charged a King County man of threatening to kill Washington Governor, Bob Ferguson. The accused man allegedly laid out a detailed plan to attack the governor at the Governor’s Mansion in Olympia. The accused man has a history of violent offenses.
Location: Austin, TX Tactic: Verbal/Written Threat Venue: Communication Channels
25 July 2026: A Houston man is facing felony charges related to threatening the state governor. The accused man claimed that he “had a mental breakdown” over a new law meant to restrict animate and AI-generated child pornography. Local authorities accuse the man of leaving an “expletive-filled voicemail” at the governor’s office in which he threatened to “stab everyone” if the state would not lift an age restriction on websites featuring adult content.
Local Government
Location: Nonthaburi, Thailand Tactic: Attack Venue: Public Area
10 August 2026: Police arrested a former Thai politician accused of shooting and killing a local government official due to a disagreement over a loan. Police called the motive “personal” and there is no indication that the violence was politically motivated. The accused shooter also wounded the target’s driver, who survived the attack. The accused shooter claimed that he followed the victim to his car and hit on the window, saying that he wanted to talk. After drawing his weapon, the official’s driver drew his weapon, prompting an exchange of fire. The accused shooter claimed that he did not intend to kill the victim.
Location: Sault Ste. Marie, MI Tactic: Verbal/Written Threat Venue: Communication Channels
24 July 2026: A 39-year-old man is facing criminal charges after he allegedly posted threats against the mayor of Sault Ste Marie on an online platform. The accused man previously served a jail sentence for threatening a police officer.
Location: Wasilla, AK Tactic: Stalking Venue: Communication Channels
11 August 2026: A federal court has charged a Wasilla man for making death threats against an unidentified mayor in Michigan. The charged man allegedly sent over twenty messages calling for the immediate death of the mayor and the mayor’s family. Publicized excerpts of the messages suggest that the sender had an anti-Muslim bias.
Location: Salix, IA Tactic: Verbal/Written Threat Venue: Communication Channels
12 August 2026: City leaders in Salix, IA canceled a city council meeting citing threatening message on social media related to a plans for a controversial new data center.https://www.iowapublicradio.org/ipr-news/2026-08-12/salix-cancels-city-council-meeting-death-threats-data-center City leaders were expecting a contentious city council meeting due to discussion over the proposed data center but decided to postpone the meeting due to specific threats against city officials.
Location: Marshall, MI Tactic: Verbal/Written Threat Venue: Communication Channels
14 August 2026: Local police are investigating “credible” death threats against city council members linked to an ongoing dispute over a proposed data center. Several city council members came forward condemning violent threats that they had received and called for more civil discourse.
Location: Blaine, MN Tactic: Harassment Venue: Home
15 August 2026: City council member and candidate for the Minnesota House, Leslie Larson, reported that a group attached photocopies of middle fingers all over her car parked outside her residence. A police investigation into the incident determined that it was not related to Larson’s political office or current campaign.
Location: Conroe, TX Tactic: Verbal/Written Threat Venue: Communication Channels
21 August 2026: Local police are investigating threats that city council members reported targeting themselves and their families related to local use of Flock license plate reader cameras. Conroe Councilmember, John Sellars, said that he and his wife had recently receiving threatening phone calls. The threat came amidst a nationwide resistance to local authorities’ use of Flock cameras to track vehicles after it emerged that a Kentucky police officer abused the system to track his ex-girlfriend.
Subscribe Today
TorchStone has launched a monthly newsletter to notify readers when our EP Reports go live. Subscribe here to join our mailing list.