March 2025 TorchStone Global Monthly Executive Protection Report
TorchStone Global believes that broader situational awareness and intelligence are key to providing quality executive protection—whether the principal is a Fortune 500 CEO, international celebrity, or local city council member. With that in mind, we are launching our monthly executive protection report, cataloging incidents we have captured through our open-source searches that are relevant to the practice of executive protection. We hope the report will serve as a centralized source of threat activity to provide insight into current trends in threats to high-profile individuals.
For more information on customized threat tracking for at-risk individuals, threat assessments, executive protection, or other security services, please contact us.
Quick Links
Summary
The TorchStone Executive Protection Report tracked 23 domestic and 17 international security incidents or updates to prior incidents impacting high-profile individuals during the month of March. Below are some key incidents of note over the past month.
- Disturbing threats against business executives continued in March. Authorities found the body of the CEO of a logistics company in Illinois in a building fire. The CEO appears to have died from stab wounds prior to the fire, suggesting an intentional murder and possible attempt to destroy the evidence. Prosecutors have charged a former employee with the murder and suspect his motive was a dispute over unpaid wages. Earlier in the month, investigators suspected that a fire at a pharmaceutical executive’s New Jersey home was an act of arson. There were no injuries or significant damage, but the incident raises concerns over threats against executives. Finally, an environmental activist group conducted “citizen’s arrests” on multiple executives in the London area. The activists confronted the executives outside their offices and read accusations that mostly focused on executive pay and environmental damage.
- Despite the announcement of charges in February against a gang of Chilean nationals accused of burglarizing high-profile athletes’ homes, the trend continued this past month. On March 29, burglars broke into the Washington state home of former NFL player Richard Sherman while his family was inside and robbed them at gunpoint. Athletes, musicians, actors, and other high-profile celebrities continue to be at risk of targeted home burglaries and should review their home security systems as soon as possible.
- TorchStone recorded nine incidents targeting local government figures over the past month. This is the highest monthly level measured since May 2024, when there were ten incidents. There were no overarching trends in threats against local government figures—targeting was extremely diverse, ranging across five U.S. states and four additional countries. Threats were very specific to local issues, such as wildfire response in southern California, controversy over airport finances in New Zealand, and disputes over the distribution of feminine hygiene products in public bathrooms in Japan. The trend highlights the tendency for constituents to be very invested in local issues that they feel directly impact them but may appear to be trivial to outsiders. Protecting local officials means monitoring specific issues that are not scalable at the same rate as federal government officials or celebrities.
Business Executive
| Location: Madison, NJ | Tactic: Attack | Venue: Home |
March 4, 2025: Authorities are investigating a suspected arson at the home of a Bayer executive in Madison, New Jersey. A fire broke out at the residence, which was quickly extinguished, resulting in no significant damage or injuries. Multiple agencies, including the FBI, are involved in the investigation, and local police have increased patrols around the residence. The motive behind the incident remains unclear.
| Location: Boston, MA | Tactic: Other Crime | Venue: Communication Channels |
March 4, 2025: Guidepoint Security reports that several members of GRIT’s executive team received suspicious physical letters at home addresses in the mail. The letters claimed to be from the BrianLian ransomware groups and stated that the corporate IT network had been compromised. The letters claimed that the stolen data would be leaked in 10 days unless the executives paid the ransom, ranging from $250,000 to $350,000, in Bitcoin. The group forwarded TOR browser links to the BrianLian group’s dark web data link site. The group stated that they no longer negotiate ransoms, which marks a departure from previous threats in which the groups claimed that negotiations would be expected. Guidepoint Security concludes that, based on the unusual delivery methods, variations in language, lack of documented intrusion activities, and the fact that the letters were sent from U.S. post offices, it is likely that a group impersonating BrianLian sent these letters in an attempt to scam the executives.
| Location: Crestwood, IL | Tactic: Attack | Venue: Office |
March 11, 2025: Authorities discovered Dane Koteski, CEO of Crestwood, a suburban trucking company, dead inside of a burning building in Crestwood, Illinois. Prior to the fire, an unknown individual fatally stabbed Koteski in the neck, according to the Cook County Medical Examiner. Police arrested an employee, identifying a possible suspect. However, the motive of the stabbing remains unclear.
| Location: Reading, UK | Tactic: Harassment | Venue: Office |
March 18, 2025: The Citizens’ Arrest Network (CAN), a UK climate activist group, targeted Chris Weston (CEO) and Alastair Cochran (CFO) of Thames Water at company headquarters. The activists did not make direct contact with the executives, as security intercepted them in the lobby.
| Location: London, UK | Tactic: Harassment | Venue: Office |
March 24, 2025: The Citizens’ Arrest Network (CAN), a UK climate activist group, confronted Jonathon Copus (CFO, Enquest), Linda Cook (CEO, Harbour Energy), and Stephen Lambert (Chief Corporate Affairs Officer, Serica Energy) outside of London’s company headquarters. The group followed the executives until they arrived at their buildings.
| Location: London, UK | Tactic: Harassment | Venue: Office |
March 26, 2025: The Citizens’ Arrest Network (CAN), a UK climate activist group, confronted Amjad Bseisu (CEO, Enquest) near company headquarters, following a series of incidents of harassment from the CAN climate activist group. Executives in the fossil fuel industry should remain aware of the CAN’s activities and growing following on social media while anticipating that they may be targeted.
Celebrity
| Location: New York, NY | Tactic: Verbal/Written Threat | Venue: Home |
August 12, 2024: Snow White star Rachel Zegler has caused controversy resulting from her “Free Palestine” political commentary, endangering the promotion of the film. Only three days after the release of the Snow White trailer, Zegler thanked supporters and noted, “And always remember, Free Palestine.” Her comments went viral, and the post generated over 8.8 million views. The relationship between Zegler and Disney studios has soured due to her political statements, which have even caused Zegler and Gal Gadot, an Israeli actress, to receive a spike in death threats. Disney has had to pay for Gadot’s additional security because of Zegler’s comments. Although the film should have been a billion-dollar movie, according to an executive at a rival film studio, the film only amassed $87 million worldwide.
| Location: Houston, TX | Tactic: Attack | Venue: Home |
March 2, 2025: Three armed intruders broke into social media influencer Kaitlyn “Amouranth” Siragusa’s home, demanding access to her cryptocurrency holdings. The assailants physically attacked Siragusa, but her husband intervened by opening fire on them, prompting the intruders to flee. Siragusa received non-life-threatening injuries following the incident.
| Location: Santa Monica, CA | Tactic: Stalking | Venue: Public Area |
March 2, 2025: Twitch streamers Cinna, Valkyrae, and Emiru were live streaming at Pacific Park on Santa Monica Pier in California when a man approached them asking for a photo, exhibiting aggressive behavior. After the streamers declined, the man began to follow them, eventually prompting them to call for security as he ran toward them, shouting, “I’ll kill you right now, I’ll kill you right now.” According to reports, the Santa Monica Police conducted a search for the suspect but were unable to locate him.
| Location: Los Angeles, CA | Tactic: Other Crime | Venue: Home |
March 3, 2025: Burglars broke into social media influencer Amanda Frances’ Bel Air home, mistaking prop money for real hundred-dollar bills. The break-in occurred while the residents were away. A neighbor’s security guard confronted the suspects at around 1am, causing them to flee. Police responded but could not locate the suspects. The burglars appear to have prioritized the fake money over other valuables, even dropping items after the security guard confronted them. Frances, a best-selling author and financial empowerment coach, confirmed the money was part of a photoshoot for a digital course. Amanda Frances reported some of the jewelry as stolen, and the LAPD is investigating how the suspects entered the home.
| Location: Nantwich, UK | Tactic: Other Crime | Venue: Home |
March 5, 2025: Influencer Tara Maynard disclosed that unknown individuals burglarized her home while she was out with her family. Upon returning, she discovered that thieves had looted the entire residence. Maynard intends to share photos of her bags and jewelry in the event that the stolen items are sold. The thieves also stole cash from the children’s safes.
| Location: Los Angeles, CA | Tactic: Harassment | Venue: Communication Channels |
March 8, 2025: Kanye West recently shared screenshots of text conversations he believed were with Joe Rogan, discussing a potential appearance on The Joe Rogan Experience podcast. In these messages, the supposed Rogan inquired about addressing West’s recent antisemitic remarks, to which West agreed. However, Rogan publicly clarified that he was not the person texting West, indicating that West had been communicating with an imposter. Following Rogan’s clarification, West deleted many of the shared screenshots.
| Location: Akron, OH | Tactic: Attack | Venue: Other Restricted Area |
March 10, 2025: Rapper Torence Ivy Hatch Jr., who performs under the name Boosie Badazz, had to flee the stage after gunshots broke out during his performance. The Deputy Chief of the Akron Police Department said that a gunman likely slipped through a side door or other blind spot to get into the Field House Lounge, which employs private security guards at the doors. Standard security measures include scans and pat downs to prevent weapons from getting in. Two male victims received gunshot wounds inside the bar area, while a third was minorly injured outside. Police suspect that the shooting resulted from an altercation and claim that the suspect did not directly target Mr. Hatch.
| Location: Los Angeles, CA | Tactic: Other Crime | Venue: Home |
March 10, 2025: Law enforcement told TMZ that they are investigating a burglary at the Los Angeles home of actor Austin Butler. On March 10, security personnel for Mr. Butler discovered a broken glass door at the residence and, upon closer inspection, realized that a firearm and cash were missing. Butler was not at home during the break-in. A review of his social media appearances reveals that he was traveling for Paris Fashion Week. Sophisticated home burglary gangs operating in southern California have been known to target celebrities’ and athletes’ homes while they are away on public tours.
| Location: Tokyo, Japan | Tactic: Attack | Venue: Public Area |
March 11, 2025: During a live broadcast, an assailant attacked Japanese live streamer Airi Sato, stabbing her multiple times in the neck, head, and chest during a live broadcast. Sato died from hemorrhagic shock. The attacker said they loaned Sato approximately ¥2 million (around $13,500), which she had not repaid, despite a court order in his favor. He tracked her location by recognizing a building in her livestream and confronted her over the unresolved debt.
| Location: Los Angeles, CA | Tactic: Verbal/Written Threat | Venue: Communication Channels |
| Location: Buckinghamshire, UK | Tactic: Stalking | Venue: Home |
March 14, 2025: A UK court sentenced a man to 16 weeks in prison after showing up multiple times at the Buckinghamshire home of UK singer Cheryl Tweed. Police had already jailed the man twice for targeting the singer in July and December of 2024 after Tweedy obtained a restraining order against him. A court convicted the 50-year-old suspect of manslaughter in 2012.
| Location: Lima, Peru | Tactic: Attack | Venue: Public Area |
March 16, 2025: Paul Hambert Flores García, the Peruvian singer who performed under the name “El Russo,” died after his tour bus came under gunfire. Unidentified suspects traveling by motorcycle opened fire on Garcia’s tour bus traveling along Via del Evitamiento, critically wounding Garcia. He died later at a nearby hospital.
| Location: Maple Valley, WA | Tactic: Other Crime | Venue: Home |
March 29, 2025: Burglars robbed former NFL player Richard Sherman’s home at gunpoint while his family was inside. Surveillance images posted on X show multiple intruders. Sherman appealed to the public for help identifying the suspects. The FBI previously warned athletes about rising break-ins.
Federal Government
| Location: Belgrade, Serbia | Tactic: Harassment | Venue: Other Restricted Area |
March 4, 2025: Serbian opposition lawmakers threw smoke grenades and used pepper spray inside parliament to protest government policies and support demonstrating students. These protests began four months ago after a roof collapse at a railway station killed 15 people, evolving into widespread demonstrations against alleged government corruption and incompetence. During the parliamentary session, opposition politicians clashed with security guards, resulting in injuries to three lawmakers; one, Jasmina Obradovic of the ruling SNS party, suffered a stroke and was hospitalized in serious condition.
| Location: Washington, D.C. | Tactic: Attack | Venue: Public Area |
March 9, 2025: U.S. Secret Service agents shot an armed man near the White House after receiving an alert about a suicidal individual traveling from Indiana. Upon finding the suspect’s parked vehicle near the Eisenhower Executive Office Building, agents approached him. At that point, he brandished a firearm, prompting the shooting. The man’s current condition is unknown, and no Secret Service personnel were injured. Police found an additional weapon, a rifle, in the car, according to sources briefed.
| Location: Greensboro, NC | Tactic: Harassment | Venue: Office |
March 13, 2025: The Office of U.S. Senator Thom Tillis claimed that disturbing death threats have forced his office staff to work remotely. Tillis and his staff have received an increasing number of death threats resulting from planned protests against President Trump and Elon Musk outside of Tillis’ office. Capital police recommend that employees work remotely during planned protests.
| Location: Collin County, TX | Tactic: Verbal/Written Threat | Venue: Communication Channels |
March 14, 2025: U.S. Rep. Keith Self postponed a town hall after he and his staff received death threats. Self-cited a Facebook message that read, “A good person will put multiple rounds in your chest so you can’t hurt any more people.” Self plans to reschedule the town hall.
| Location: Mogadishu, Somalia | Tactic: Attack | Venue: Public Area |
March 18, 2025: Militants attacked Somali President Hassan Sheikh Mohamud’s motorcade using a bomb in Mogadishu. Despite the explosion near the presidential palace, the president remained unharmed and continued to the front lines. Witnesses and officials confirmed that the convoy was struck, resulting in four fatalities at the scene.
| Location: Seoul, South Korea | Tactic: Harassment | Venue: Public Area |
March 20, 2025: Members of the main opposition Democratic Party of Korea, including Rep. Baek Hye-ryun, were struck by raw eggs in front of the Constitutional Court in Jongno-gu, Seoul. The liberal party members held a press conference around 9 a.m., calling for the swift dismissal of President Yoon Suk Yeol when they confronted a group of Yoon’s supporters rallying in favor of the impeached leader. Police have yet to confirm the identity of the individual who threw eggs at Rep. Baek.
| Location: Washington, D.C. | Tactic: Verbal/Written Threat | Venue: Communication Channels |
March 24, 2025: Representative Jasmine Crockett (D-TX) faced criticism for suggesting that Senator Ted Cruz “has to be knocked over the head, like hard.” This remark followed her earlier call for Elon Musk to be “taken down,” which prompted a warning from U.S. Attorney General Pam Bondi. Senator Cruz has continuously responded to Crockett’s comments online.
| Location: South Dennis, MA | Tactic: Verbal/Written Threat | Venue: Communication Channels |
March 28, 2025: Federal prosecutors charged a 62-year-old man with transmitting interstate threats after police arrested him for allegedly threatening to murder a prominent federal official and their family. At approximately 10:15pm on March 28, the suspect called a relative of the federal official and began yelling threats and obscenities. The relative hung up after approximately 12 seconds. The caller tried to call back, but the relative did not answer. There was no caller ID. Investigators were able to trace the call back to the man in South Dennis, Massachusetts, within 24 hours.
State Government
No reporting for March.
Local Government
| Location: St Louis, MO | Tactic: Verbal/Written Threat | Venue: Public Area |
March 4, 2025: A man threatened a mass-casualty attack and alleged he planned to kill St. Louis Mayor Tishaura Jones. Police arrested the suspect and said that he had methamphetamine in his pocket. The suspect faces charges of possession of a controlled substance and one count of a second-degree terrorist threat.
| Location: Bethesda, MD | Tactic: Verbal/Written Threat | Venue: Communication Channels |
March 10, 2025: Judges requested additional security in local courthouses due to a rise in threats and increasing violence from defendants, reporting that employees have received threatening emails. One defendant appeared unexpectedly outside a courthouse employee’s home after finding the address. The committee also discussed installing bulletproof glass and security cameras at the courthouse. The courthouse faces staffing issues, and judges report an increase in cases involving juveniles.
| Location: Los Angeles, CA | Tactic: Verbal/Written Threat | Venue: Communication Channels |
March 11, 2025: Janisse Quiñones, CEO and Chief Engineer of the Los Angeles Department of Water and Power, has sought out personal security resulting from the public pressure she has been under since the Palisades Fire. The Los Angeles Department of Water and Power’s Board of Commissioners voted against providing Quiñones security, leading Quiñones to contract for private security. According to the board, since the start of the wildfire, LADWP has received threats to the CEO Chief Engineer’s personal safety, and many have required direct intervention by local law enforcement.
| Location: Ft. Myers, FL | Tactic: Verbal/Written Threat | Venue: Communication Channels |
March 19, 2025: In a community meeting, Fort Myers Ward 6 City Council member Darla Bonk confirmed that unknown individuals sent her death threats. This came after a split vote on whether Fort Myers police should be granted federal powers to help enforce federal immigration laws. Council member Bonk stated that the police chief has increased patrols in her neighborhood, as well as in the neighborhoods of two other council members, Diana Giraldo and Teresa Watkins-Brown.
| Location: Tulum, Mexico | Tactic: Attack | Venue: Public Area |
March 21, 2025: Two assailants on a motorbike fatally shot Tulum’s Security Minister, José Roberto Rodríguez Bautista. The assailants ambushed Rodríguez and his bodyguard, prompting them to return fire, killing one of the attackers. Despite hospitalization, Rodríguez succumbed to his injuries, while his bodyguard sustained wounds. Authorities have launched an investigation into the incident and are pursuing the second assailant who fled the scene.
| Location: Houston, TX | Tactic: Harassment | Venue: Public Area |
March 26, 2025: Houston City Council Member Amy Peck reported that pro-Palestinian protesters harassed her during a Young Republicans event. As she attempted to leave, protesters allegedly surrounded her car, used slurs, and made statements she perceived as threats toward her and her family. The Houston Police Department has initiated an investigation into the incident. No one has been detained or taken into custody as of the end of March.
| Location: Mie Prefecture, Japan | Tactic: Verbal/Written Threat | Venue: Communication Channels |
March 28, 2025: Mie Prefectural Assembly member Ayaka Yoshida received over 8,000 death threats via email after advocating for menstrual products in public restrooms. The emails, sent from a single address at roughly one-minute intervals over several days, included messages mocking her suggestion. Yoshida filed a complaint with local police, who accepted it. She stated that such threats intimidate her and suppress her activities as an assembly member.
| Location: Baguio City, Philippines | Tactic: Verbal/Written Threat | Venue: Communication Channels |
March 28, 2025: Baguio City Mayor Benjamin Magalong received death threats after uncovering corruption linked to local politicians and public works projects. His allegations involved the misuse of the General Appropriations Act 2025 as an election fund. This allegation has led to corruption cases against several government employees.
| Location: Auckland, NZ | Tactic: Verbal/Written Threat | Venue: Communication Channels |
March 30, 2025: Auckland Mayor Wayne Brown has increased security at his apartment after receiving threatening comments on social media. This week, CCTV cameras will be installed at his inner-city apartment, which will be monitored centrally by the council. The threats emerged following his controversial proposal to sell the council’s shares in Auckland Airport to address a $325 million budget deficit. Authorities are investigating the threats to ensure the mayor’s safety.
Community Leader
| Location: Kamuya, Nigeria | Tactic: Other Crime | Venue: Public Area |
March 2, 2025: Suspected members of an Islamic State affiliate in West Africa known as ISWAP abducted Professor Abubakar Eljuma from Nigerian University Biu, along with other bus passengers and travelers. Although all female passengers have been released, male passengers remain captive. The attack allegedly occurred in Yobe state on the Damaturu-Biu road, known for kidnappings, bombings, and murders.
| Location: Silao, Mexico | Tactic: Attack | Venue: Public Area |
March 3, 2025: Authorities in Mexico are investigating the murder of a reporter in Guanajuato, believed to be Kristian Zavala, a local news reporter for the city of Silao, who covered news on his Facebook page. Guanajuato is one of the deadliest cities in Mexico. The Committee to Protect Journalists and Articulo 19 have demanded an investigation. The motive of the killing is unclear; however, Mexico continues to rank as one of the most dangerous countries for journalists.
| Location: Austin, TX | Tactic: Harassment | Venue: Home |
| Location: Orléans, France | Tactic: Attack | Venue: Public Area |
March 22, 2025: A 16-year-old assailant attacked Rabbi Arié Engelberg while he walked with his young son. The assailant reportedly said antisemitic insults before physically assaulting the rabbi. Authorities arrested the suspect and transferred him to a psychiatric facility, treating the incident as an antisemitic hate crime.