Threat250: Federal Missteps Fuel Evolving Summer Threats

A partially-disrupted, alleged anti-government violent extremist network likely remains an evolving threat to public gatherings across the United States, amplifying the risk of politically-motivated violence in the near-term. Following the disruption of a developing plot to attack the UFC Freedom 250 event on June 14, 2026, unidentified co-conspirators likely shifted operational focus toward upcoming July 4th Independence Day celebrations and World Cup gatherings, such as the July 3rd World Cup match in Kansas City, Missouri.

Anti-Government Violent Extremists Targeting Summer Gatherings

We assess with high confidence the remaining members of this network will shift communication strategies and near-term planning efforts toward geographically convenient targets perceived to be associated with America 250 celebrations and the ongoing World Cup. While the arrest of key facilitators temporarily degraded the network’s ability to coordinate and synchronize attacks, continued publication of investigative details by senior government officials, missteps by federal law enforcement agents, and publication of unsealed court documents provide threat actors with critical insight necessary to adapt their plans and avoid future detection. Successful mobilization and execution of coordinated attacks could rapidly escalate tensions across the United States throughout the remainder of summer.

Opportunities

Law enforcement should maintain operational security and avoid revealing awareness of potential anti-government violent extremists by ceasing the practice of contacting active plotters telephonically and inquiring about their interest in conducting violent acts. Federal prosecutors should ensure court documents are appropriately sealed until ongoing threats subside. Finally, members of the public should remain vigilant while attending large gatherings, particularly those of strategic political interest.

Publicized Disruption of UFC Plotters Amplifies Short-Term Risk

This report was prompted by the overt disruption of an alleged anti-government violent extremist plot targeting the June 14, 2026, UFC Freedom 250 event at the White House, which was attended by senior government officials, foreign dignitaries, and thousands of spectators. The plot originated in a March 2026 TikTok group chat titled Vanguard of the Old, which was described as an effort to restore the constitutional republic following its theft by corporations, politicians, and foreign actors who usurped power from the people and brought about late stage democracy. A group leader further articulated a vision to throw fuel on the fire and accelerate an American uprising and another emphasized selecting targets that would appeal to both political parties. The plot was revealed on June 10, 2026, when the family member of an Ohio-based alleged co-conspirator notified local authorities of the individual’s mobilization toward violence.

• The threat actors sought to detonate multiple explosive-laden drones over the north side of the White House lawn to induce mass panic, forcing the crowd to flee toward pre-positioned gunmen who would attempt targeted assassination of high value targets.
• The threat actors expressed interest in evading counter-UAS measures by modifying drones to operate over fiber optic control lines. The complex nature of drone modification likely contributed to the June 13th decision to change the focus of the operation to the Midwest.
• Also on June 13, 2026, an FBI agent called an alleged co-conspirator and directly inquired whether they intended to travel to Washington, D.C., and participate in the attack. The co-conspirator rebuffed the ill-advised strategy and proceeded to delete the Signal app from their phone, further complicating investigative efforts.
• On June 18, 2026, an alleged plotter notified an associate of a change in plans, which was directly attributed to media coverage of the FBI’s arrest of alleged co-conspirators involved in the UFC plot. The plotter further indicated multiple others had evaded arrest through communication security measures. On June 21, 2026, an additional subject allegedly stated during their arrest that they were aware of the FBI’s investigation because they had seen news reports of the others arrests and read the DOJ reports, indicating they had been actively monitoring DOJ press releases and court documents.
• Senior law enforcement officials speaking through multiple media outlets claimed there were 10 identified plot members and more than 20 total members of the network. Court documents fully identify eight defendants in custody for their alleged acts, indicating at least two more known associates remain at-large and more than a dozen others may have evaded identification entirely.

Outlook

We assess with medium confidence the threat to public gatherings remains elevated over the next 30 days, particularly surrounding July 4th events and the July 3rd World Cup match in Kansas City, Missouri. As indicated by the network’s willingness to pivot focus following law enforcement action, it is highly likely remaining members will continue to shift targeting strategies based on revelations in publicly available court documents, press releases, and media reports. Future plots may continue to aspire toward use of fiber-optic drones and will almost certainly involve firearms, as well. Observable indicators of an active threat may include:

• Possession of readily identifiable fiber-optic drones in areas designated by the FAA as No Drone Zones, which include areas from 1-3 nautical miles away from World Cup events. Fiber-optic drones are commonly used by sporting venues, so distinction should be made between legitimate and unauthorized use
• Unexplained presence of thin, fiber-optic lines or discarded spools in open spaces, such as public parks, parking structures, and building roof tops
• Erratic changes in behavior, featuring statements affirming a belief that violence is a necessary means to restore constitutional order

Implications

The tactical, operational, and strategic goals of this anti-government violent extremist network carry severe implications for public safety, as they risk a confluence of fear involving poorly understood and challenging technical attack mechanisms, highly-charged political motives, and exploitation of a poorly staffed and increasingly incapable federal law enforcement community. The growing skills gap and leadership losses at the FBI over the last 18 months likely continue to play a significant role in the execution of flawed investigative strategies and communications failures. Widening disconnects between federal law enforcement, the public, and state and local officials further complicate the community-oriented approaches necessary to detect and disrupt future threats.