October 2026 TorchStone Executive Protection Report

TorchStone Global believes that broader situational awareness and intelligence are key to providing quality executive protection—whether the principal is a Fortune 500 CEO, international celebrity, or local city council member. Our monthly executive protection report catalogues incidents we have captured through our open-source searches that are relevant to the practice of executive protection. We hope the report will serve as a centralized source of threat activity to provide insight into current trends in threats to high-profile individuals. 

For more information on customized threat tracking for at-risk individuals, threat assessments, executive protection, or other security services, please contact us. 

​​Contents

Business Executive
Celebrity
Federal Government
State Government
Local Government
Community Leader 

Summary

The TorchStone Executive Protection Report tracked 23 domestic and 12 international security incidents or updates to prior incidents impacting high-profile individuals during the month of October 2026. Below are some key incidents of note over the past month.  

• The most significant development this month was a coordinated wave of suspicious mailings sent to public officials across the United States. On 15 October, federal authorities confirmed they were investigating more than 100 letters containing an unknown white powder. The letters had been mailed to congressional offices, state election offices and other public officials in at least 19 states. Letters addressed to Senators Chuck Schumer, Chris Murphy, Kirsten Gillibrand and Lisa Blunt Rochester were intercepted before reaching them. On 16 October, the Bay Area offices of Representatives Jimmy Panetta, Zoe Lofgren, Ro Khanna and Mark DeSaulnier received similar letters. One was opened by a staff member, which led to an evacuation. The same day, a suspicious package at Representative Pramila Jayapal’s Seattle office prompted a hazmat response that closed a downtown street for several hours. The FBI and the U.S. Postal Inspection Service are still investigating. This incident is a reminder of the importance of having a mail and package screening procedure at offices and residences. Preparedness should include clear procedures for screening incoming mail at offices and residences, and training staff and household members to recognize and respond to suspicious items. For principals with prominent political profiles, these measures matter even more in the period before major events such as the midterm elections. 

• Threats sent through social media, direct messages and email remained a frequent concern in October 2026, and a recurring feature of these incidents was that they extended beyond the principal to their family. Several cases led to arrests: one individual allegedly threatened Representative Mike Collins and his son-in-law on Instagram, and another allegedly threatened Oklahoma Governor Kevin Stitt and his son on Facebook. Even where no charges followed, the effect on the target’s household was significant. After a Facebook threat against Daytona Beach Mayor Derrick Henry and his family, Henry disabled comments on his page and said his family was taking additional safety precautions.  

Additionally, two federal cyberstalking cases show how online harassment can reach a principal’s wider circle. The man charged in the Katie Miller case allegedly contacted phone numbers associated with her parents, and in a second case, a Haverford College professor allegedly posted his victim’s home address online and threatened that victim’s son. Earlier threats against the families of Secretary of Defense Pete Hegseth and Texas State Representative Jeff Leach follow the same pattern. Together, these incidents suggest that protective planning should include principals’ family members and should identify and account for how much of their personal information is available online. 

Please find the full list of incidents categorized below.  

Business Executive

   Location: Toronto, Canada Tactic:​​ Attack​ Venue: Home​

29 October 2026: Toronto police responded to a violent home invasion early in the morning of 29 October targeting the home of a real estate CEO. At least three armed assailants broke into the home through a rear door. The burglars confronted the family, who were home at the time, and demanded valuables. A violent interaction followed, leading to the CEO and two of his daughters suffering gunshot wounds. The CEO and his wife also suffered serious injuries after being struck in the head with a hammer.  

Celebrity

   Location: Houston, TX  Tactic: Other Crime​ Venue: Home​

29 September 2026: Former Houston Texans safety Jaylen Reed was held at gunpoint by three masked men during an armed carjacking at his home on 4 January 2026. An FBI investigation into the incident expanded to include members of the Houston-area YNS gang, resulting in the arrests of as many as 15 people. This case was publicized in September 2026, following the investigation and arrests.  

   Location: Memphis, TN Tactic: Other Crime ​Venue: Restricted Area​

4 October 2026: Memphis Police evacuated Elvis Presley’s Graceland estate in Memphis, Tennessee, after receiving a bomb threat shortly after 11:30 AM. Officers cleared staff and visitors while they searched the property. Police found no explosives and determined the threat was a hoax. Graceland reopened after officers completed the search.

   Location: Seoul, South Korea Tactic: Harassment​ Venue: ​​Home​

6 October 2026: South Korean actor Yoo Hae-jin was placed under police protection after receiving threats and facing protests over his role in The Assassin(s), a film about the 1974 assassination of former First Lady Yuk Young-su. Police provided him with an emergency smartwatch and increased patrols near his residence in northern Seoul, where protesters demanded an apology and the film’s withdrawal from theaters. 

   Location: Marbella, Spain Tactic: ​​Attack​ Venue: Office​

7 October 2026: British-trained plastic surgeon Alexander Aslani, 57, was shot and killed by a masked gunman inside his clinic in Marbella, Spain, in front of patients. A Swedish teenager was arrested on suspicion of murder the following day, as investigators examined whether the killing was connected to threats from a disgruntled former patient or the death of a patient during surgery, though these possible motives remain unconfirmed. 

   Location: West Hollywood, CA Tactic: ​​Attack​ Venue: Public Area​

8 October 2026: Actor Keegan Allen reported two men robbed him outside of Laurel Supply, a high-end grocery store in West Hollywood. According to the Los Angeles County Sheriff’s Department, deputies responded around 9:05 PM after the men threatened him with a handgun and knife, demanded his watch and bracelet, and struck him in the face with the handgun. They took his watch and fled in an unidentified vehicle. Emergency personnel treated a cut on Allen’s forehead, but he was not taken to a hospital. Authorities continue to investigate the incident. 

   Location: Tulsa, OK Tactic: Verbal/Written Threat​ Venue: ​​Restricted Area​

9 October 2026: Organizers cancelled a performance by country music star Ella Langley in Tulsa, OK due to an apparent bomb threat on 9 October. The venue, BOK Center, announced the cancellation on social media without specifying the nature of the threat. Langley apologized to her fans on Instagram, saying the “decision was made under the advisement of local authorities, the venue, and my security team.” Shortly after the cancellation, the Tulsa Police Department swept the venue and found no credible threat to the event. A police spokesperson said the concerns arose after an anonymous phone caller threatened “great harm to the people at this event in the way of shots fired and bombs.” The incident highlights the threat posed to artists and audiences around live events.

  Location: Vila-real (Villarreal), Spain Tactic: ​​Other Crime​ Venue: ​​Home​

13 October 2026: According to Spanish media, armed suspects broke into the home of professional soccer goalkeeper Péter Gulácsi during the overnight hours of 12-13 October. Gulácsi, his wife, and two children were home during the incident but sustained no injuries. Spanish authorities continue to investigate and have not disclosed details about the suspects, stolen property, or arrests.

   Location: Los Angeles, CA Tactic: Other Crime​ Venue: Home

17 October 2026: The Los Angeles-area residence of television personality Ariana Madix was burglarized after an individual reportedly broke through a rear door and stole jewelry and other valuables. A neighbor contacted the Los Angeles Police Department, which responded to investigate. Authorities have not released a suspect description or confirmed the value of the stolen property. It remains unclear whether Madix was home at the time. The investigation remains ongoing.

   Location: Atlanta, GA Tactic: ​​Verbal/Written Threat​ Venue: Communication Channels​

21 October 2026: Former NBA player Enes Kanter Freedom said that he contacted the FBI after receiving death threats over his plans to attend Game 3 of the WNBA Finals in Atlanta on 21 October. Kanter provided images showing messages referencing the assassination of Charlie Kirk. Kanter's planned appearance at the final game was in the context of a dispute with the WNBA over eligibility for the league, as Kanter and another former NBA player previously announced plans to enter the 2027 WNBA draft, stating that they identify as women.

   Location: Indianapolis, IN Tactic: Stalking​ Venue: Home​

29 October 2026: During a podcast interview, WNBA player Sophie Cunningham said that she is cooperating with the FBI in an investigation involving more than 20 individuals allegedly stalking her. 

Federal Government

   Location: Atlanta, GA Tactic: ​​Verbal/Written Threat​ Venue: Communication Channels​

28 July 2026: A 31-year-old man from Georgia allegedly posted a threat on X directed at U.S. Secretary of Defense Pete Hegseth, threatening to kill Hegseth’s family and referencing an attack on a Chabad synagogue. According to the FBI task force officer’s affidavit, he admitted posting the message, which was traced to Fulton County, Georgia; a federal criminal complaint was filed on 25 September 2026, charging him with interstate threatening communications.

   Location: Rotherham, United Kingdom Tactic: Other Crime​ Venue: ​​Home​

3 October 2026: Joshua Kerry, 28, has been charged with engaging in conduct in preparation of terrorist acts, including an alleged plot targeting Nigel Farage. Following searches of Kerry’s home in Rotherham, police reportedly discovered a list of more than 100 high-profile individuals, including MPs, and are contacting those identified regarding their personal security. Kerry remains charged with the July murder of Ann Widdecombe and is scheduled to stand trial in June.

   Location: Waltham, Massachusetts Tactic: ​​Stalking​ Venue: ​​Communication Channels​

2 October 2026: Federal authorities charged 41-year-old Massachusetts resident John Anthony Proia III with cyberstalking conservative podcaster and former Trump administration official Katie Miller. Prosecutors allege Proia contacted Miller at least 40 times over several weeks through calls and messages, including disturbing voicemails and texts referencing Miller and her husband, White House Deputy Chief of Staff Stephen Miller. He also allegedly contacted phone numbers associated with Miller’s parents. Proia faces one federal cyberstalking charge as the FBI and Justice Department investigate the case. 

   Location: Buffalo, NY Tactic: Verbal/Written Threat Venue: Communication Channels

2 October 2026: Authorities arrested Anthony Lantrell Bennett for allegedly threatening U.S  Representative Mike Collins and his son-in-law through an Instagram direct message. Investigators said he sent the threat after viewing a social media post by Collins’ son-in-law.

   Location: Florence, AL Tactic: Verbal/Written Threat Venue: Communication Channels

5 October 2026: A 36-year-old woman from Courtland, Alabama, was federally indicted for allegedly threatening President Donald Trump in a Facebook post regarding his planned attendance at the Alabama-Georgia football game in Tuscaloosa. The post reportedly stated, “I’ll put a bullet through him if he dares.” FBI and Secret Service agents, along with local police, located her in Florence, Alabama, and she faces charges of threatening the president and transmitting threatening communications across state lines.

   Location: Warsaw, Poland Tactic: Stalking Venue: Office

11 October 2026: A 66-year-old man was arrested in Poland on suspicion of plotting to assassinate Polish Prime Minister Donald Tusk and Defense Minister Władysław Kosiniak-Kamysz. Prosecutors said they found improvised explosive materials and possible fragmentation-grenade-like devices in the suspect’s apartment, and charged him with nine offences, including planning to overthrow state authorities by force. The suspect has denied the allegations and has not disclosed a motive.

   Location: Washington, D.C. & Nationwide Tactic: Harassment Venue: Office

15 October 2026: Federal authorities are investigating more than 100 suspicious letters containing an unknown white powder mailed to congressional offices, state election offices, and other public officials across at least 19 states. Letters addressed to several Democratic senators, including Chuck Schumer, Chris Murphy, Kirsten Gillibrand, and Lisa Blunt Rochester, were intercepted before reaching their recipients. The FBI and U.S. Postal Inspection Service are working to identify those responsible and determine whether the mailings are connected to other recent suspicious letters sent to election officials.

   Location: San Francisco Bay Area Tactic: Harassment Venue: Office

16 October 2026: Multiple congressional offices across the San Francisco Bay Area received suspicious letters containing an unknown white powder on 16 October 2026. According to reports, the offices of Reps. Jimmy Panetta, Zoe Lofgren, Ro Khanna, and Mark DeSaulnier were affected. One staff member opened an envelope, prompting an evacuation and a 911 call. Authorities determined one substance was not hazardous, while the FBI and U.S. Postal Inspection Service continued investigating similar mailings nationwide ahead of the November 2026 midterm elections.

   Location: Seattle, WA Tactic: Harassment Venue: Office

16 October 2026: The Seattle office of Representative Pramila Jayapal reported receiving a suspicious package in the mail on Friday 16 October, prompting a hazmat response from Seattle Fire that blocked 6th Avenue for several hours that afternoon. The incident is one of dozens of suspicious packages received by government and campaign offices across the country that week.

   Location: Mpigi District, Uganda Tactic: Attack Venue: Public Area

17 October 2026: Former Rwandan army sergeant major Robert Kabera, 50, an outspoken critic of President Paul Kagame, was found beheaded on the outskirts of Kampala, Uganda, after reportedly traveling to inspect a construction site. Ugandan authorities said the circumstances surrounding his death remain under investigation. The killing has heightened fears among Rwandan dissidents living in exile, while Kabera’s family and opposition groups are calling for greater security and a thorough investigation.

   Location: Wangaratta, Victoria, Australia Tactic: Attack Venue: Office

19 October 2026: Police charged a 43-year-old man after he allegedly ran over Australian independent MP Helen Haines with his vehicle in Wangaratta, Victoria. Authorities described the incident as a targeted attack. Haines, 65, reportedly suffered severe leg injuries requiring amputation and remained in critical but stable condition. The suspect faces charges including dangerous driving, causing serious injury and causing harm to a Commonwealth public official, while authorities continue investigating the incident and his motive.

   Location: Berlin, Germany Tactic: Stalking Venue: Communication Channels

29 October 2026: Germany’s digital minister, Karsten Wildberger, confirmed that German federal MPs and government employees have received warnings from Apple that their iPhones may have been targeted by "mercenary spyware." Wildberger said that federal investigators had reacted quickly by writing to everyone affected about what to do. The number and identities of politicians who received the alerts remain unknown.

State Government

  Location: San Antonio, TX Tactic: Verbal/Written Threat Venue: Communication Channels

13 September 2026: Texas authorities arrested 48-year-old San Antonio resident Jason Riggs after he allegedly posted two threats on X against Republican State Representative Jeff Leach and his family on 13 September 2026. The threats followed Leach’s public criticism of Republican Bo French over comments about the racial makeup of University of Texas at Austin students. Riggs reportedly admitted to making the posts during an interview at the Guadalupe County Jail and remained in custody on two bonds totaling $150,000.

   Location: Austin, TX Tactic: Verbal/Written Threat Venue: Office

30 September 2026: According to an arrest warrant affidavit, a man from Converse, TX told his friend that he was going to “shoot up” the State Capitol building in Austin. Texas Department of Public Safety officers spoke to the suspect’s friend, who said he “had made verbal threats to assault the Texas State Capitol Building.” The friend told officers that the suspect had told him that he was angry at the American Israeli Public Affairs Committee (AIPAC) and that “these people have to be exterminated,” suggesting an antisemitic/anti-Israel ideology behind the threat.

   Location: Cleveland County, OK Tactic: Verbal/Written Threat Venue: Communication Channels

9 October 2026: A 39-year-old man previously convicted of second-degree murder was arrested in Cleveland County, Oklahoma, for allegedly posting threats on Facebook to kill Oklahoma Governor Kevin Stitt and his son. Court documents state he was released from prison in June after serving eight years for a 2007 killing and allegedly failed to report a change of residence as required for a violent offender.

   Location: McKinney, Texas Tactic: Stalking Venue: Public Area

5 October 2026: The FBI arrested a 17-year-old boy from McKinney, Texas, for allegedly plotting to assassinate U.S. Representative Keith Self and carry out an ISIS-inspired terrorist attack at a public cook-off event in North Texas. Investigators allege the teenager obtained a firearm and planned the attack for 17 October, but authorities arrested him before the alleged planned date. The suspect remains in federal custody in North Texas, and reports did not specify his identity or the exact charges.

   Location: Perth, Australia Tactic: Stalking Venue: Office

21 October 2026: Police arrested a man after he reportedly made verbal threats against a state MP while armed with nunchucks. The incident occurred near the Perth offices of state MP Hannah Beazley. Police found the 56-year-old suspect parked in a nearby vehicle and arrested him. There were no injuries in the incident.

Local Government

   Location: Altavista, VA Tactic: Verbal/Written Threat Venue: Communication Channel

23 February 2026: Altavista Police arrested a man from a nearby town after he sent an alleged threatening message to Altavista Mayor, Reggie Bennett. A Campbell County Circuit Court jury found the accused man guilty of communicating threats of death or bodily injury, a felony, to the mayor in late October 2026. The verdict report marked the first public mention of the threatening incident.

   Location: Detroit, MI Tactic: Verbal/Written Threat Venue: Office

5 October 2026: Authorities arrested a Detroit resident for allegedly threatening Mayor Mary Sheffield. The suspect reportedly threatened to “shoot up” the Coleman A. Young Municipal Center downtown before later threatening to harm Sheffield at Detroit Police Headquarters. He was charged with making a false report or threat of terrorism and is under house arrest on a $50,000 bond.

   Location: Daytona Beach, FL Tactic: Verbal/Written Threat Venue: Communication Channels

9 October 2026: Daytona Beach Mayor Derrick Henry disabled comments on his mayoral Facebook page after a user posted a violent threat against him and his family. Daytona Beach police investigated the incident, but prosecutors determined the comment did not warrant criminal charges; the author reportedly admitted posting it out of frustration and denied intending harm. Henry said his family is taking additional safety precautions while he remains available to residents through other channels.

   Location: Manteca, CA Tactic: Verbal/Written Threat Venue: Communication Channels

26 October 2026: The Manteca Police Department is investigating a social media post that threatened Mayor Gary Singh. Police said the department became aware of a statement posted on a local community Facebook group that said, "someone should shoot the mayor." There were no arrests or suspects identified as of the end of October.

   Location: Mumbai, India Tactic: Verbal/Written Threat Venue: Office
23 October 2026: Mumbai Mayor Ritu Tawde’s office received a cryptic, threatening email naming her office, celebrities, and several schools in the city as potential targets, which led to police checks that found nothing suspicious. The email, received at the Brihanmumbai Municipal Corporation (BMC) office at around 11:30 AM, allegedly threatened to target schools at 1 PM and the mayor’s office at 3pm on Friday.

Community Leader

   Location: Haverford, PA Tactic: Verbal/Written Threat Venue: Communication Channels

6 October 2026: Haverford College religion professor Guangtian Ha was arrested and charged with cyberstalking a Jewish colleague, allegedly sending approximately 50 antisemitic messages between October 2025 and May 2026. The indictment alleges he also posted the victim’s home address, shared information about their family, and threatened the victim and their son. Ha was placed on administrative leave and barred from campus while the criminal case proceeds.

   Location: Aguascalientes, Mexico Tactic: Verbal/Written Threat Venue: Communication Channels

1 October 2026: Bishop Juan Espinoza Jiménez of Aguascalientes, Mexico, was targeted by an alleged online threat offering 40,000 Mexican pesos to anyone willing to attack him after he publicly criticized violence and called for government accountability. The message was attributed to social media personality José Lápiz and prompted condemnation from Catholic leaders and calls for protection. Aguascalientes authorities launched a Cybercrime Unit investigation into the threat and other threatening messages directed at the bishop.

Subscribe Today

TorchStone has launched a monthly newsletter to notify readers when our EP Reports go live. Subscribe here to join our mailing list.

Connect with our specialists to discuss how we can tailor our security and risk management solutions to your operations.