In a dramatic sequence of events on July 13, 2024, former President Donald Trump narrowly escaped an assassination attempt during a campaign rally in Butler, Pennsylvania. The details, emerging from text messages and surveillance reports, reveal a troubling series of security lapses and miscommunications.
The timeline
Around 4:19 pm, a local countersniper, who was part of the broader security detail, texted his colleagues to notify them that his shift was ending.“Guys I am out. Be safe,” he texted to a group of colleagues.
As he exited his post on the second floor of a warehouse overlooking the rally site, he observed a young man with long, stringy hair sitting on a picnic table outside the fenced area of the Butler Fair Show grounds. The countersniper texted his colleagues at 4:26 pm about the person, noting that he might have seen him with his rifle and might pose a threat, reported NYT.
The person, later identified as 20-year-old Thomas Crooks from Bethel Park, Pennsylvania, aroused suspicion.
By 5:10 pm, Crooks had moved closer to the warehouse where the countersnipers were stationed. One of the countersnipers took photographs of Crooks and sent them in a group chat, according to a law enforcement after-action report, advising that the Secret Service should be alerted. Despite these warnings, the security response failed to adequately address the threat.
At 5:38 pm, text messages revealed that Crooks had been seen using a range finder to survey the stage area, prompting further concern. However, due to a shortage of volunteers and a lack of communication, the Secret Service and local law enforcement struggled to keep up with Crooks’ movements. “Kid learning around building we are in. AGR I believe it is. I did see him with a range finder looking towards stage. FYI. If you wanna notify SS snipers to look out. I lost sight of him,” the text read, as reported by NYT.
Crooks had been scouting the rally site even before the Secret Service conducted their first walk-through on July 8. He used a drone to survey the area and had researched past assassinations, including that of President John F Kennedy. On the day of the rally, he purchased ammunition and a ladder, which he later used to gain access to a roof about 400 feet from Trump’s podium.
As Trump took the stage at 6:03 pm, rally attendees noticed Crooks on the roof. Crooks fired his first shot at 6:11 pm, narrowly missing Trump, who dived to the ground. Secret Service agents responded swiftly, returning fire and killing Crooks.
Investigators are piecing together Crooks’ motivations and actions leading up to the attempt. They found evidence of a plan involving rudimentary bombs and a fixation on high-profile figures. Despite the extensive security presence, the series of miscommunications and lapses allowed Crooks to get dangerously close to his target.
Security lapses and missteps
Taken together, the text messages have revealed a comprehensive account of the hours leading up to the assassination attempt on former President Donald Trump. These messages indicate that the gunman attracted police suspicion more than 90 minutes before the shooting—significantly earlier than the previously reported 60-minute window discussed in congressional hearings.
The messages also add to the evidence that the would-be assassin was often one step ahead of security forces, and in particular the Secret Service.
Despite the presence of countersnipers tasked with monitoring the rally, Crooks managed to observe them from his vantage point. After the attack, confusion persisted among police officers about how Crooks executed his plan. “So, on TV, they’re saying Trump was shot at, and he got hit, but I don’t believe that,” one officer was heard saying on body-worn camera footage 17 minutes after the shooting.
Crooks’ actions being probed
Authorities are still investigating Crooks’ motivations and his preparatory actions. Evidence from his personal devices and interviews with investigators have shed light on his activities. Crooks had legally acquired an AR-15-style semi-automatic rifle from his father in October 2013.
In the lead-up to the attack, he received packages containing fertilizer pellets and radio devices, which he used to construct rudimentary bombs—two of which were found in his vehicle and another in his home.
Crooks’ online searches revealed a fixation on high-profile figures, including FBI Director Christopher Wray, Attorney General Merrick Garland, President Joe Biden, and Trump. He also researched “major depressive disorder.”
Following the announcement of Trump’s rally in Butler on July 3, Crooks focused his attention on the event and historical assassinations. On July 6, he searched for “How far away was Oswald from Kennedy?” and visited the farm show grounds the following day, where he spent about 20 minutes scouting the location. He also registered to attend the rally.
The Secret Service conducted their first walk-through of the site on July 8, joined by local and state law enforcement agencies. However, they decided to exclude the AGR warehouse complex—including Building No. 6, which Crooks later utilized—from their inner security perimeter. This oversight allowed Crooks to approach the building without passing through security screening.
The confusion over who was responsible for monitoring the roof persists. Kimberly A Cheatle, then the director of the Secret Service, admitted before a House committee that she was unaware of the assigned duties for roof security. Cheatle resigned the following day, adding to the ongoing scrutiny of the security failures that nearly led to a catastrophic event.
The timeline
Around 4:19 pm, a local countersniper, who was part of the broader security detail, texted his colleagues to notify them that his shift was ending.“Guys I am out. Be safe,” he texted to a group of colleagues.
As he exited his post on the second floor of a warehouse overlooking the rally site, he observed a young man with long, stringy hair sitting on a picnic table outside the fenced area of the Butler Fair Show grounds. The countersniper texted his colleagues at 4:26 pm about the person, noting that he might have seen him with his rifle and might pose a threat, reported NYT.
The person, later identified as 20-year-old Thomas Crooks from Bethel Park, Pennsylvania, aroused suspicion.
By 5:10 pm, Crooks had moved closer to the warehouse where the countersnipers were stationed. One of the countersnipers took photographs of Crooks and sent them in a group chat, according to a law enforcement after-action report, advising that the Secret Service should be alerted. Despite these warnings, the security response failed to adequately address the threat.
At 5:38 pm, text messages revealed that Crooks had been seen using a range finder to survey the stage area, prompting further concern. However, due to a shortage of volunteers and a lack of communication, the Secret Service and local law enforcement struggled to keep up with Crooks’ movements. “Kid learning around building we are in. AGR I believe it is. I did see him with a range finder looking towards stage. FYI. If you wanna notify SS snipers to look out. I lost sight of him,” the text read, as reported by NYT.
Crooks had been scouting the rally site even before the Secret Service conducted their first walk-through on July 8. He used a drone to survey the area and had researched past assassinations, including that of President John F Kennedy. On the day of the rally, he purchased ammunition and a ladder, which he later used to gain access to a roof about 400 feet from Trump’s podium.
As Trump took the stage at 6:03 pm, rally attendees noticed Crooks on the roof. Crooks fired his first shot at 6:11 pm, narrowly missing Trump, who dived to the ground. Secret Service agents responded swiftly, returning fire and killing Crooks.
Investigators are piecing together Crooks’ motivations and actions leading up to the attempt. They found evidence of a plan involving rudimentary bombs and a fixation on high-profile figures. Despite the extensive security presence, the series of miscommunications and lapses allowed Crooks to get dangerously close to his target.
Security lapses and missteps
Taken together, the text messages have revealed a comprehensive account of the hours leading up to the assassination attempt on former President Donald Trump. These messages indicate that the gunman attracted police suspicion more than 90 minutes before the shooting—significantly earlier than the previously reported 60-minute window discussed in congressional hearings.
The messages also add to the evidence that the would-be assassin was often one step ahead of security forces, and in particular the Secret Service.
Despite the presence of countersnipers tasked with monitoring the rally, Crooks managed to observe them from his vantage point. After the attack, confusion persisted among police officers about how Crooks executed his plan. “So, on TV, they’re saying Trump was shot at, and he got hit, but I don’t believe that,” one officer was heard saying on body-worn camera footage 17 minutes after the shooting.
Crooks’ actions being probed
Authorities are still investigating Crooks’ motivations and his preparatory actions. Evidence from his personal devices and interviews with investigators have shed light on his activities. Crooks had legally acquired an AR-15-style semi-automatic rifle from his father in October 2013.
In the lead-up to the attack, he received packages containing fertilizer pellets and radio devices, which he used to construct rudimentary bombs—two of which were found in his vehicle and another in his home.
Crooks’ online searches revealed a fixation on high-profile figures, including FBI Director Christopher Wray, Attorney General Merrick Garland, President Joe Biden, and Trump. He also researched “major depressive disorder.”
Following the announcement of Trump’s rally in Butler on July 3, Crooks focused his attention on the event and historical assassinations. On July 6, he searched for “How far away was Oswald from Kennedy?” and visited the farm show grounds the following day, where he spent about 20 minutes scouting the location. He also registered to attend the rally.
The Secret Service conducted their first walk-through of the site on July 8, joined by local and state law enforcement agencies. However, they decided to exclude the AGR warehouse complex—including Building No. 6, which Crooks later utilized—from their inner security perimeter. This oversight allowed Crooks to approach the building without passing through security screening.
The confusion over who was responsible for monitoring the roof persists. Kimberly A Cheatle, then the director of the Secret Service, admitted before a House committee that she was unaware of the assigned duties for roof security. Cheatle resigned the following day, adding to the ongoing scrutiny of the security failures that nearly led to a catastrophic event.