
The measurable surge in Secret Service protective-intelligence workload is real and large; the hard part is separating a genuine rise in violent intent from an expanding universe of online signals, mental-health crises, and modern accessibility that now push far more cases into the system.
At a Glance
- The Secret Service reports a year-over-year increase of just over 40% in threats involving full-time protectees, alongside roughly 10,000 threat-related cases this year.
- Agency records show steep growth in protective operations and intelligence investigations across FY2023–FY2025, consistent with a broader surge in workload.
- Leaders cite the internet and social media as accelerants; they also point to mental-health factors and broader accessibility as key drivers.
- The numbers track investigations and leads more than confirmed violent plots; interpreting them as pure “violent threats” overstates what the data show.
What the numbers actually measure
When the Secret Service Director tells a national audience that “threats are up just over 40%,” he is summarizing a workload signal that shows the protective system is encountering and processing more potential danger, faster. Two figures anchor that picture: a year-over-year increase above 40% for full-time protectees and about 10,000 threats or threat-related cases logged since January. Those statements appeared in a 60 Minutes interview and were echoed in subsequent reporting. They reflect what the Service calls “protective-intelligence” activity—investigations triggered by direct threats, concerning behaviors, or other indicators related to people under protection—not a tidy count of explicit, credible assassination plots.
The agency’s formal budget testimony reinforces that story with administrative series: protective visits climbed from 5,242 in FY2023 to 7,175 in FY2025 (about 37%), and the Office of Strategic Intelligence and Information managed more than 12,300 protective-intelligence investigations in FY2025—nearly 60% above the prior year. Those are operational metrics, not courtroom outcomes; they nonetheless establish that the system’s caseload and field tempo have grown substantially in a short span.
Mechanism: why the pipeline is filling
Protective intelligence in 2026 is built on visibility and velocity. Social platforms make public figures—and their schedules, locations, and personal lives—more accessible, and they lower the friction for grievance expression. The Director’s phrasing was blunt: “The world is different than what it was 20 years ago … social media changes people.” In parallel, more data flows into the Service from citizens, local police, and automated monitoring, so behaviors that might once have stayed private—or stayed local—now surface as leads requiring triage. Agency leaders also flag mental-health deterioration as a major factor; many cases begin with fixation, delusion, stalking, or suicidal ideation rather than an articulated threat, yet still demand assessment because those pathways have historically preceded targeted violence.
These dynamics help explain the shape of the increase. The Service has not only more threats to check; it has more signals that look like threats at the intake stage. That is not hand-waving. The FY2027 budget justification explicitly ties rising operational demand to growing platforms and a heavier protective schedule; the same document details expanded investigative throughput and more site visits, which match the reported rise in cases.
Evidence from incidents versus evidence from activity
A reasonable reader asks the crucial question: are there actually more attempts on the president’s life, or just more investigations? The public record supports both elevated activity and multiple serious incidents, including three attempts or breaches in roughly two and a half years referenced in the 60 Minutes discussion. Those episodes clarify the stakes; they do not convert every logged case into a violent threat. On the metrics side, what we can state with confidence is that the Service is processing more investigations and committing more resources to protective operations. What we cannot infer from these figures, without overreach, is that confirmed violent plots or prosecutions rose at the same rate; the administrative measures were not designed to answer that narrower question.
This distinction matters because protective-intelligence programs are intentionally inclusive at the top of the funnel. They capture direct threats, yes, but also behaviors and referrals that correlate with risk. That design has saved lives, historically, by enabling early disruption. It also means case counts will move with changes in reporting norms, analytic tools, and staffing—inputs that can push the number up even when underlying intent is flat. The agency’s own budget testimony and external reporting frame the rise as an operational and intelligence surge; treating it as a pure spike in violent assailants conflates categories.
Causation: social media, mental health, and the confounders
The Director’s claim that social media “changes people” aligns with a growing research literature linking platform affordances—algorithmic amplification, frictionless sharing, identity dynamics—to intimidation and violence, particularly against public officials. That body of work does not isolate a single cause; it places social platforms among several interacting drivers, including political polarization and mental-health stressors. The Service’s own leaders emphasize mental-health crises alongside online accessibility, which is consistent with threat-assessment practice that views targeted violence as the outcome of intersecting stressors, ideation, and opportunity rather than a monocausal phenomenon.
Corroborating context from other institutions reinforces the plausibility of a broader threat surge. The U.S. Marshals Service reported roughly a 150% increase in threats targeting federal judges since 2019, and Capitol Police have handled thousands of cases annually against members of Congress, well above late-2010s levels. Those are not Secret Service numbers, and the definitions differ, but they place the presidential protective environment inside a wider ecosystem experiencing more intimidation and more alerts.
What the counterpoints really say
There is no concrete counter-record disproving the Service’s reported increase; the challenges focus instead on what the number means. Skeptics rightly note that the tallies describe investigations and threat-related cases, not only explicit violent threats. They point out the intake now includes warning signs such as fixation and delusion, and that mental-health issues are a “for sure” driver, which dilutes any single-cause narrative about social media. A historical remark by a prior director in 2017—threats running six to eight per day, roughly constant with the previous decade—highlights that the baseline has moved from a different era and under different protective demands. None of that undercuts the current year’s 40% and 10,000-case signals; it reframes them as workload and risk-environment indicators rather than a census of gunmen.
How to read these figures without distortion
Three interpretive rules keep the claims honest. First, respect category boundaries: “protective-intelligence investigation” is broader than “violent threat.” Second, compare like with like: a one-year jump in full-time protectee threats is not directly comparable to a multi-year change in site visits or a different unit’s caseload. Third, account for measurement effects: more staff, better tools, and stronger reporting pipelines will elevate counts even if offender intent is unchanged. These caveats do not weaken the bottom line that the protective environment has intensified; they prevent the common error of converting operational load into a one-for-one map of violent actors.
If policymakers want sharper resolution, the path is straightforward. A declassified, methodologically consistent time series separating direct violent threats, nonviolent threats, stalking, mental-health interventions, and credible plots would answer the headline questions. Independent audit of the calculations underlying the 40% and 10,000-case figures would increase public trust without compromising sources and methods. And if leaders are going to attribute causation to social media, pairing expert judgment with preregistered causal studies—linking de-identified case records to documented platform-policy shifts—would move the discourse from intuition to evidence.
8 PM Bottom-of-the-Hour News
The Secret Service is confronting an uptick in the number of threats against the people it's charged to protect. Director Sean Curran tells CBS News there have been 10-thousand threats made against Secret Service protectees so far this year – and the… pic.twitter.com/kOr3wQ4zwu
— Worldwide News Network (@WorldwideNNX) October 12, 2026
Implications for protection and for the public
For protection professionals, the lesson is to keep widening the intake aperture while improving triage so scarce resources concentrate on subjects on a pathway to violence. That means investing in analytic tools, clinical partnerships, and training that distinguish transient online fury from mobilization. For the public conversation, the lesson is restraint: the surge is serious, but precision about what is rising—investigations, protective tempo, and online-fueled signals—keeps urgency from turning into exaggeration. The Service’s core claim stands: the protective workload has surged, and today’s information environment helps explain why. The harder question is quantifying how much of that surge is violence-ready intent. Answering it requires the data now locked behind operational walls.
Sources:
mediaite.com, cbsnews.com, secretservice.gov, ijr.com, abcnews.com