Forty-six documented U.S. swatting cases reveal the same chain: address data exposure » hoax narrative » armed response.
Swatting is the most visible failure mode of proximity-triggered data exposure. Here is what the pattern looks like.
§ I
The chain.
Step 01
Address exposure
A home address is findable through property records, public-official directories, doxxing posts, or celebrity press. The address is the precondition; nothing else happens without it.
»
Step 02
Hoax narrative
A perpetrator places a 911 call (or email, or voice-changer call) with a maximally violent fabricated story. The narrative is engineered to draw a tactical response, not a wellness check.
»
Step 03
Armed response
Officers arrive with weapons drawn. The victim or a family member may answer the door. In two of these forty-six cases, the encounter ended in death.
§ II
How addresses get found.
Every incident depends on a perpetrator first obtaining a home address. The top three pathways are tied at ten cases each, two of them transparency-by-design (property records, public-official directories) and one of them adversarial (social-media doxxing). This is the heart of the address-exposure thesis.
Property records
10
Public official directory
10
Social media doxx
10
Tabloid / celebrity press
5
News reporting
2
Wrong address (stale data)
2
Court filings
1
FEC filings
1
§ III
What the numbers say.
19
Shooting hoaxes
The most common hoax narrative across all 46 cases. Engineered to draw armed response, not welfare checks.
15:13
Absent : present
When documented, victims were more often not home than home. Swatting is signal, not confrontation.
2
Fatalities
Andrew Finch (Wichita, 2017), Mark Herring (Bethpage, TN, 2020). One shot by police; one heart attack mid-response.
20
Documented pathway
In 20 cases, the address-exposure mechanism is explicitly sourced. In 24, inferred from victim profile.
12
Single conspiracy
Cases tied to the Romanian / Serbian Szabo and Radovanovic operation that ran from December 2020 to January 2024.
1 DAY
Tightest trigger
Time from Bellows removing Trump from Maine's ballot to officers at her Manchester home.
§ IV
One script, many victims.
Federal prosecutors charged Thomas Szabo (Romania) and Nemanja Radovanovic (Serbia) in 2024 with a multi-year swatting conspiracy that targeted approximately 100 U.S. victims (40 private citizens, 61 officials). Radovanovic admitted to investigators he "recited the elements of a script." That script shows up across the late-2023 political wave in our casebook.
The script (paraphrased from federal filings)12 / 46 CASES
I shot my wife with an AR-15 three times while she was sleeping. I am armed. I will kill myself.
Rick ScottJay AshcroftTanya ChutkanAdam MorfeldGeorge SorosJack SmithShenna BellowsTommy TubervilleMarjorie Taylor GreeneTom EmmerJoe Biden (White House)Arthur Engoron
Script attribution lets you read the late-2023 wave not as a swarm of independent incidents but as a coordinated operation with measurable cadence. Most operations leave fingerprints. This one left grammar.
§ V
The long tail.
Most victims in the casebook were swatted once. A small minority absorb a wildly disproportionate share of the targeting. The tail is the hallmark of an organized harassment community attaching itself to a single target and refusing to let go.
31
Single incident
Most cases. One hoax call, one response, then quiet.
3
2 incidents
Tuberville, Cyrus, Kinzinger
2
3 incidents
Wachs (early YouTube case), Minaj
3
4 + incidents
Vail (4+), MTG (8+), Tomlinson (40+)
Patrick S. Tomlinson, a Milwaukee science-fiction author, has been the subject of more than forty documented hoax responses since 2018. The campaign traces to a single tweet about comedian Norm Macdonald. The address re-circulates across forums faster than it can be suppressed.
§ VI
Two who died.
Documented U.S. swatting fatalities
Andrew Finch
Wichita, KS · Dec. 28, 2017
Shot by Wichita police while opening his front door in response to noise outside. The hoax caller, Tyler Barriss, was given a stale address by a player taunting him over a $1.50 Call of Duty bet. Barriss received 20 years federal. The address was the victim's only connection to the dispute.
Mark Herring
Bethpage, TN · Apr. 27, 2020
Suffered a fatal heart attack mid-response. Targeted by a Discord-coordinated extortion group demanding his Twitter handle @Tennessee. The group had compiled his family's addresses and posted them on Discord. Ringleader Shane Sonderman received 5 years federal.
Read the full casebook.
46 documented cases, the underlying data, the exposure pathway for each, and the full incident summaries. All forty-six, in one searchable interface.
