UNCLASSIFIED//FOR OFFICIAL USE ONLY
(U)
This document contains UNCLASSIFIED//FOR OFFICIAL USE ONLY (U//FOUO) information that may be exempt from public release under the Freedom of Information Act (5 U.S.C.
552). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public, the
media, or other personnel who do not have a valid need to know without prior approval of an authorized DHS official. State and local homeland security officials may share this document with
critical infrastructure and key resource personnel or private sector security officials without further approval from DHS.
(U) All US person information has been minimized. Should you require US person information on weekends or after normal weekday hours during exigent and time sensitive circumstances,
contact the Current and Emerging Threat Watch Office at 202-447-3688, CETC.OSCO@HQ.DHS.GOV. For all other inquiries, please contact the Homeland Security Single Point of Service, Request
for Information Office at DHS-SPS-RFI@hq.dhs.gov, DHS-SPS-RFI@dhs.sgov.gov, DHS-SPS-RFI@dhs.ic.gov
UNCLASSIFIED//FOR OFFICIAL USE ONLY
30 May 2020
(U//FOUO) Ongoing Violence, Information Narratives Nationwide Poses Continued
Threat to Law Enforcement
This Intelligence Note (IN) provides information regarding violence threatening homeland security
at protests related to recent officer-involved deaths and highlights the concern for potential additional violence from
domestic terrorist actors and other ideologically motivated individuals who seek to violently respond. The information
in this IN is current as of 30 May 2020.
(U//FOUO) In the last 24 hours the types of people or groups seeking to carry out violence in response to the death of
George Floyd in Minneapolis has shifted in many cities. The initial violent looters and protestors were believed to be
organic members of the local communities. However, domestic violent extremists are attempting to structure the
protests to target specific symbols of state, local, and federal authority. We anticipate armed individuals will continue to
infiltrate the protest movement. We assess with high confidence during the period of darkness from 30 to 31 May the
violent protest movements will grow and DVEs and others will seek to take over government facilities and attack law
enforcement. We further assess protest activities following incidents involving law enforcement’s use of lethal force
pose a high risk of escalating to both premeditated and random attacks targeting law enforcement officers nationwide.
Since 2017, domestic violent extremists (DVEs) have conducted reprisal attacks against law enforcement officers
following incidents of officer-involved shootings, which could inspire others to attempt similar acts. DVEs who subscribe
to opposing ideologies have also conducted lethal attacks against one another at public protests, suggesting that DVEs
could seek to exploit otherwise lawful protesting of law enforcement’s use of lethal force to advance their movement’s
goals.
» (U//FOUO) As of 30 May, reporting has indicated several incidents of violence at otherwise lawful protests
that have targeted law enforcement and critical infrastructure. A Federal Protective Service contract officer in
Oakland, California has been killed as a result of this violence, according to official reporting.
1
» (U) On 7 July 2016, a black supremacist extremist acting in response to officer-involved shootings ambushed
law enforcement officers, killing five, during a planned non-violent First Amendment-protected rally in Dallas,
Texas. Police engaged and killed the attacker during a stand-off following the ambush.
2
» (U//FOUO) On 12 August 2017, a white supremacist extremist drove a vehicle into a crowd of counter-
protestors at Charlottesville, Virginia rally, killing one, according to a Department of Justice press release.
3
Other white supremacist extremists allegedly engaged in less than lethal violence against counter protestors
at this and other rallies in 2017, according to the criminal complaint.
4
» (U//FOUO) Separately, on 27 May, users of a white supremacist extremist Telegram channel attempted to
incite followers to engage in violence and start the “boogaloo”—a term used by some violent extremists to
refer to the start of a second Civil War—by shooting in a crowd, according to DHS reporting.
5
(U//FOUO) As of publication of this IN, DHS is also aware of cyber actors’ use of disruptive tactics against at least
one public-facing government website, which we assess, is tied to recent events in Minnesota. It is common for
politically or ideologically-motivated criminal hackers—as well as other opportunistic cyber actors—to engage in
short-term disruptions against government and symbolic targets in the midst or aftermath of a major event. We