UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE 23 April 2020 (U) Field Operations Division – Southeast Coastal Region (U//FOUO) Incidents in Florida and Nationwide Highlight Significance of COVID-19 as a Driver of Violent Threats (U//FOUO) Scope. This Intelligence Note (IN) highlights recent incidents of violent actors—including some individuals who were likely motivated by domestic terrorist ideologies—mobilizing or threatening violence in the Homeland in response to the coronavirus disease 2019 (COVID-19) pandemic.a This IN is written to inform federal, state, and local law enforcement analysts and law enforcement officers who investigate violent activity. The information cutoff date for this IN is 31 March 2020. (U//FOUO) Prepared by the DHS Intelligence Enterprise (DHS IE) Field Operations Division (FOD) - Southeast Coastal Region (SECR) and the Florida Fusion Center (FFC). Coordinated with the DHS IE Counter Terrorism Mission Center (CTMC). (U) Florida Incidents Highlight Potential for COVID-19 to Drive Violence as Pandemic Continues (U//FOUO) Recent incidents and arrests nationwide illustrate how the COVID-19 pandemic is driving violent actors—both non-ideologically and ideologically motivated—to threaten violence. Two non-ideological examples occurred in Florida where one individual exploited the pandemic to spread fear while targeting a seemingly random location, while the other individual threatened people or entities perceived as having a direct role in fighting the pandemic. » (U//FOUO) On 29 March, an individual in Jacksonville, Florida sprayed the entrance of a local business with an aerosol substance from a spray bottle labeled “COVID-19” and allegedly told employees and patrons that they were infected with the virus, according to a Jacksonville Sheriff’s Office press statement posted on social media.1,2 The incident and motivation remain under law enforcement investigation. The individual was arrested on federal weapons of mass destruction-related charges and has been released from jail on a $15,000 bond, according to the same sources. (U//FOUO) DHS defines domestic terrorism as any act of unlawful violence that is dangerous to human life or potentially destructive of critical infrastructure or key resources committed by a group or individual based and operating entirely within the United States or its territories without direction or inspiration from a foreign terrorist group. This act is a violation of the criminal laws of the United States or of any state or other subdivision of the United States and appears to be intended to intimidate or coerce a civilian population, to influence the policy of a government by intimidation or coercion, or to affect the conduct of a government by mass destruction, assassination, or kidnapping. A domestic terrorist differs from a homegrown violent extremist in that the former is not inspired by and does not take direction from a foreign terrorist group or other foreign power. a IA-43907-20 (U) Warning: This document is UNCLASSIFIED//FOR OFFICIAL USE ONLY (U//FOUO). It contains information that may be exempt from public release under the Freedom of Information Act (5 U.S.C. 552). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public, the media, or other personnel who do not have a valid need to know without prior approval of an authorized DHS official. State and local homeland security officials may not share this document with critical infrastructure and key resource personnel or private sector security officials without further approval from DHS. (U) LAW ENFORCEMENT SENSITIVE: The information marked (U//LES) in this document is the property of FBI and the Orlando Police Department may be distributed within the Federal Government (and its contractors), US intelligence, law enforcement, public safety or protection officials, and individuals with a need to know. Distribution beyond these entities without FBI or the Orlando Police Department’s authorization is prohibited. Precautions should be taken to ensure this information is stored and/or destroyed in a manner that precludes unauthorized access. Information bearing the LES caveat may not be used in legal proceedings without first receiving authorization from the originating agency. Recipients are prohibited from subsequently posting the information marked LES on a website on an unclassified network. (U) All US person information has been minimized. Should you require US person information on weekends or after normal weekday hours during exigent and time sensitive circumstances, contact the Current and Emerging Threat Watch Office at 202-447-3688, CETC.OSCO@HQ.DHS.GOV. For all other inquiries, please contact the Homeland Security Single Point of Service, Request for Information Office at DHS-SPS-RFI@hq.dhs.gov, DHS-SPS-RFI@dhs.sgov.gov, DHS-SPS-RFI@dhs.ic.gov UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE » (U//LES) On 24 March, an individual was arrested for allegedly threatening to blow up the Orlando Police Department’s headquarters and other nearby buildings with four bombs, because people are being “put... out of work” due to the COVID-19 crisis, according to the Orlando Police Department arrest report.3 The individual allegedly made the threat by phone approximately two hours after the Orlando Mayor announced a countywide stay-at-home order in response to the COVID-19 pandemic, according to open source media reporting of the incident.4 The individual faces charges of false report of a bombing and unlawful use of a two-way communication device, and is currently in jail awaiting trial, according to the arrest report.5 (U//FOUO) Incidents Nationwide Indicate Domestic Terrorists also Using COVID-19 as an Impetus for Violence (U//FOUO) To date, the COVID-19 pandemic has driven at least two individuals motivated in whole or in part by domestic terrorist ideologies to attempt or threaten violence in the Homeland. These incidents indicate that COVID-19 is serving as the impetus for some domestic terrorist plots. » (U//LES) On 24 March a racially motivated violent extremist (RMVE) espousing white supremacist extremist beliefs died after a confrontation with FBI agents in Missouri as they tried to arrest him for plotting to blow up a local hospital, according to open source media reporting of the FBI Kansas City Field Office press statement.6,7,b,c The individual was the subject of a domestic terrorism investigation for plotting to commit an act of terrorism—specifically a bombing—and considered several targets, including a school with a large population of black students, a synagogue, and a mosque, according to the same source.8 As the COVID-19 pandemic expanded, the subject allegedly chose to target a local hospital with a vehicle-borne improvised explosive device to cause severe harm and mass casualties, according to FBI reporting of the subject’s probable cause to arrest affidavit.9 » (U//FOUO) In mid-March a New Mexico man was federally charged with two counts of interstate communication of threats after allegedly threatening the life of the New Mexico Governor when she announced the closing of all schools and a ban on large public gatherings because of the COVID-19 pandemic, according to the federal criminal complaint.10 The individual, who espoused anti-government extremist ideology, allegedly posted a message to the New Mexico Governor’s Office social media site, stating, “Time to pick up your rifles and kill this governor so we can re-establish the constitution as law of New Mexico. I’m done with corrupt government. They will serve the people or die,” according to the same source.11,d The individual also allegedly posted an additional threat online to kill all police officers and government officials deemed in violation of the Constitution, stating he was prepared to die for his cause, according to the same source.12 The individual is currently in jail awaiting trial, according to the US Attorney’s Office official press release.13 (U//FOUO) Racially or ethnically motivated violent extremism (RMVE) encompasses threats involving the potentially unlawful use or threat of force or violence, in furtherance of political and/or social agendas, which are deemed to derive from bias―often related to race or ethnicity―held by the actor against others, including a given population group. c (U//FOUO) DHS defines white supremacist extremists as groups or individuals who facilitate or engage in acts of unlawful violence directed at the federal government, ethnic minorities, or Jewish persons in support of their belief that Caucasians are intellectually and morally superior to other races and their perception that the government is controlled by Jewish persons. d (U//FOUO) DHS defines anti-government extremists as groups or individuals who facilitate or engage in unlawful acts of violence directed at federal, state, or local law enforcement, other government officials, critical infrastructure or government facilities in order to affect the conduct of a government or influence the policy of a government by intimidation or coercion, in response to their belief that their liberties are being taken away by the perceived unconstitutional or otherwise illegitimate actions of government officials or law enforcement. Some form of this belief is common to several violent extremist ideologies, including sovereign citizen extremism and militia extremism; anti-government extremists differ from these other categories in that they do not subscribe to these violent extremist ideologies in total, but often adopt elements of these ideologies, including the use of violence in furtherance of their ideology. b UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE Page 2 of 4 UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE (U) Outlook (U//FOUO) Domestic terrorists and other violent extremist actors probably will continue to threaten violence in the Homeland in response to the COVID-19 pandemic until the virus is contained and the normal routine of US societal life resumes. As the COVID-19 threat expands throughout the United States, the violent extremist threat will also continue to evolve, potentially increasing in frequency and severity. The emphasis on social distancing, closures of many businesses, and cessation of popular leisure activities nationwide precludes most mass gathering events—historically appealing targets for both international and domestic terrorists. However, the pandemic has created a new source of anger and frustration for some individuals. As a result, violent extremist plots will likely involve individuals seeking targets symbolic to their personal grievances. (U) Related Products (U//FOUO) For additional information regarding threats from domestic terrorists please refer to the below intelligence products which can be found on HSIN: » (U//FOUO) “Terrorists Exploiting COVID-19 Pandemic in an Attempt to Incite Violence,” dated 23 March 2020. » (U//FOUO) “Disruption of a Racially or Ethnically Motivated Violent Extremist’s Plot to Attack a Missouri Medical Center,” dated 30 March 2020. » (U//FOUO) “COVID-19: Violent Extremists’ Social Media Bio Attack Calls – Crudely Viable, Warrants Attention, but Effects Likely Not Measurable,” dated 1 April 2020. (U) Report Suspicious Activity (U) To report suspicious activity, law enforcement, Fire-EMS, private security personnel, and emergency managers should follow established protocols; all other personnel should call 911 or contact local law enforcement. Suspicious activity reports (SARs) will be forwarded to the appropriate fusion center and FBI Joint Terrorism Task Force for further action. For more information on the Nationwide SAR Initiative, visit http://nsi.ncirc.gov/resources.aspx. (U) Tracked by: HSEC-8.1, HSEC-8.5, HSEC-8.6, HSEC-8.8, HSEC-8.10 UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE Page 3 of 4 UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE (U) Source Summary Statement (U//LES) DHS IE FOD has documented criminal actors and domestic extremists threatening violence in the Homeland in response to the COVID-19 pandemic. We have high confidence in our information based on federal law enforcement government reporting and US government media releases due to their reliability based on longevity of credible reporting and history of criminal investigations. We have medium confidence in our information drawn from investigative media reports of criminal incidents and US criminal court documents. Our confidence levels would be further validated if we had information corroborated from more government and law enforcement sources affiliated with criminal investigative cases and court proceedings that could provide details of the forces and factors driving suspects’ motivations and operations. (U); Doug Phillips; Orlando Sentinel; “Florida man sprayed bottle of ‘COVID-19’ on doors of business, cops say”; 31 MAR 2020; https://www.orlandosentinel.com/coronavirus/fl-ne-coronavirus-crime-arrest-20200331-yv5hbmh6mnh2niy65hqbthipcistory.html; accessed on 31 MAR 2020; (U); Newspaper Website. 2 (U); Chloe Walker; News 4 Jacksonville; “Florida man arrested for threatening COVID-19 contamination”; 29 MAR 2020; https://www.news4jax.com/news/local/2020/03/30/florida-man-arrested-for-threatening-covid-19-contamination/; accessed on 2 APR 2020; (U); Local News Website. 3 (U//LES); Orlando Police Department; Arrest Report Case# 2020---1-4317; 24 MAR 2020; Extracted information is U//LES; Overall document classification is U//LES. 4 (U); Jeff Weiner; Orlando Sentinel; “Man with phony detonator threatened to blow up Orlando Police Department over coronavirus closures, police say”; 25 MAR 2020; https://www.orlandosentinel.com/coronavirus/os-ne-coronavirus-bomb-threat-orlandopolice-20200325-l62vsyxfsjatddeaelxofqyuj4-story.html; accessed on 30 MAR 2020; (U); Newspaper Website. 5 (U//LES); Orlando Police Department; Arrest Report Case# 2020---1-4317; 24 MAR 2020; Extracted information is U//LES; Overall document classification is U//LES. 6 (U); Michael Kosnar and Phil Helsel; NBC News; “FBI says man killed in Missouri wanted to bomb hospital amid coronavirus epidemic”; published 25 MAR 2020; https://www.nbcnews.com/news/us-news/fbi-says-man-killed-missouri-wanted-bombhospital-amid-coronavirus-n1169166; accessed on 30 MAR 2020; (U); Local News Website. 7 (U); Associated Press; “FBI: Man 'Fatally Injured' During Domestic Terrorism Arrest, Had Plotted Attack on Hospital Amid Coronavirus Pandemic;” published by Time, 26 MAR 2020; https://time.com/5810734/fbi-terrorist-bomb-coronavirus-hospital/; accessed on 2 APR 2020; (U); Newspaper Website. 8 (U); Michael Kosnar and Phil Helsel; NBC News; “FBI says man killed in Missouri wanted to bomb hospital amid coronavirus epidemic”; published 25 MAR 2020; https://www.nbcnews.com/news/us-news/fbi-says-man-killed-missouri-wanted-bombhospital-amid-coronavirus-n1169166; accessed on 30 MAR 2020; (U); Local News Website. 9 (U//LES); FBI Kansas City Division; Situational Information Report Activity Alert; 25 MAR 2020; (U//LES); “Probable Cause Arrest of USPER Timothy Wilson Following Stated Desire to Detonate an Improvised Explosive Device at a Kansas City Area-based Hospital, as of 24 March 2020”; Extracted information is U//LES; Overall classification is U//LES. 10 (U); US District Court for the District of New Mexico; “USA v. Daniel Logan Mock”; filed 16 March 2020; Criminal Complaint Case #: 1:20-mj-00957-LF. 11 (U); US District Court for the District of New Mexico; “USA v. Daniel Logan Mock”; filed 16 March 2020; Criminal Complaint Case #: 1:20-mj-00957-LF. 12 (U); US District Court for the District of New Mexico; “USA v. Daniel Logan Mock”; filed 16 March 2020; Criminal Complaint Case #: 1:20-mj-00957-LF. 13 (U); US Department of Justice; U.S. Attorney’s Office, District of New Mexico Press Release; “Man from Albuquerque faces federal charges for allegedly posting Facebook messages threatening to kill the Governor of New Mexico and law enforcement officers”; 18 MAR 2020; https://www.justice.gov/usao-nm/pr/man-albuquerque-faces-federal-charges-allegedly-posting-facebookmessages-threatening; accessed on 30 MAR 2020; (U); Government Website. 1 UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE Page 4 of 4 CLASSIFICATION: Office of Intelligence and Analysis Customer Feedback Form Product Title: 1. Please select partner type: and function: 2. What is the highest level of intelligence information that you receive? 3. Please complete the following sentence: “I focus most of my time on:” 4. Please rate your satisfaction with each of the following: Very Satisfied Somewhat Satisfied Neither Satisfied nor Dissatisfied Somewhat Dissatisfied Very Dissatisfied N/A Product’s overall usefulness Product’s relevance to your mission Product’s timeliness Product’s responsiveness to your intelligence needs 5. How do you plan to use this product in support of your mission? Drive planning and preparedness efforts, training, and/or emergency response operations (Check all that apply.) Initiate a law enforcement investigation Intiate your own regional-specific analysis Intiate your own topic-specific analysis Develop long-term homeland security strategies Do not plan to use Other: Observe, identify, and/or disrupt threats Share with partners Allocate resources (e.g. equipment and personnel) Reprioritize organizational focus Author or adjust policies and guidelines 6. To further understand your response to question #5, please provide specific details about situations in which you might use this product. (Please Use Manuscript in the space provided.) 7. What did this product not address that you anticipated it would? (Please Use Manuscript in the space provided.) 8. To what extent do you agree with the following two statements? Strongly Agree Agree Neither Agree nor Disagree Disagree Strongly Disgree N/A This product will enable me to make better decisions regarding this topic. This product provided me with intelligence information I did not find elsewhere. 9. How did you obtain this product? 10. Would you be willing to participate in a follow-up conversation about your feedback? To help us understand more about your organization so we can better tailor future products, please provide: Name: Position: Organization: State: Contact Number: Email: Submit Feedback Privacy Act Statement CLASSIFICATION: Product Serial Number: REV: 0 2017