The core fact is not ambiguous: the Secret Service is confronting a sharp, measurable surge in protective-intelligence workload tied to threats against full-time protectees, with leadership describing just over a 40% year-over-year rise and roughly 10,000 threat-related cases in a single year; the mechanics of the modern information ecosystem—especially social platforms—make people and information more reachable, which expands both intent expression and detection.
At a Glance
- Secret Service leadership reported threats involving full-time protectees up just over 40% year over year, with about 10,000 threat-related cases in the period.
- Official budget testimony corroborates a substantial jump in protective operations and intelligence investigations across recent fiscal years.
- Online reach and accessibility are identified as key operational drivers; the director also flags mental-health deterioration as a major factor.
- Case counts reflect a broad protective-intelligence net, not only confirmed violent plots—important for interpreting the scale and what it means.
What the numbers actually capture—and why they rose
When the Secret Service director says threats are “up just over 40%,” he is describing a surge in the stream of cases the agency must assess, triage, and, where necessary, disrupt. In the 60 Minutes interview that brought these figures into view, Director Sean Curran paired the percentage with an absolute workload—around 10,000 threat or threat-related matters in the year—framing the environment as a step-change from the prior period. The agency’s own budget submission for FY2027 aligns with that picture: protective visits rose from 5,242 in FY2023 to 7,175 in FY2025 (about 37%), and its Office of Strategic Intelligence and Information managed more than 12,300 protective-intelligence investigations in FY2025, nearly 60% above the prior year. This is the infrastructure view of risk: not simply how many credible plots ripen, but how much potentially dangerous signal pours into the system that must be processed before anything happens.
Mechanistically, this rise is plausible. Online platforms lower the friction of projecting threatening language, contacting public figures, and spreading targeting information; they also lower the friction of detection, referral, and interagency tips. Curran’s plain-language attribution—“the internet” makes people and information more accessible—tracks exactly with the workload reality his investigators face, and his further line that “social media changes people” summarizes what many protective professionals observe anecdotally in subjects who escalate from grievance to fixation to contact behavior. The budget testimony states it more clinically: as social media grows, “threats become more prevalent”.
Defining “threat” in a protective-intelligence world
To read these numbers correctly, separate three layers: expression, warning behavior, and operationally credible plots. Protective-intelligence programs cast a deliberately wide net, by design, because preventing a single attack requires upstream intervention in dozens or hundreds of ambiguous cases. Not every investigation begins with a direct, articulable threat; teams systematically evaluate warning markers such as fixation, stalking or harassment patterns, delusional ideation, expressed interest in violence, suicidality, and weapons access. Those markers are heterogeneous—many cases resolve into mental-health diversions or cease-and-desist outcomes rather than criminal charges—but they all demand screening labor and, at times, field work. That is why a 40% rise in cases signifies an operational squeeze even if confirmed plots have not risen at the same rate.
This is not merely a semantic caution. Case counts can climb for several reasons that do not map 1:1 to violent intent: improved monitoring, more public reporting, new data-sharing with platforms, changes to risk thresholds, or expansions in who qualifies as a “full-time protectee.” The Secret Service’s own historical statements underscore the point. A decade ago, then-Director Randolph Alles said the agency saw roughly six to eight threats per day across presidencies and noted that added protective demands—residences, family footprints—also drive workload. Today’s environment is materially different, but the continuity is that “threats” in protective parlance are a workflow category, not a verdict about imminent violence.
What corroborates the elevated environment—and what does not
Three lines of evidence reinforce the claim that the protective climate has worsened. First, the agency’s internal operations data show growth across multiple measures—visits, investigations, and the intelligence pipeline—rather than a single cherry-picked statistic. Second, leadership publicly links that environment to observed conditions investigators face daily: ubiquitous social channels, instant amplification, and subjects with deteriorating mental health who move faster from grievance to outreach. Third, the period includes concrete, high-salience incidents—attempts and serious breaches involving President Trump’s protection—that demonstrate the environment is not purely an artifact of online chatter.
At the same time, the evidence does not prove that violent attempts have increased by 40% year over year, nor that social media is the sole causal engine. The director’s causal language is practitioner judgment, not the product of a controlled study; political polarization, foreign influence operations, copycat dynamics, and enhanced detection could each contribute in unquantified shares. Outside the Secret Service, adjacent institutions report their own surges—U.S. Marshals tracked a sharp increase in threats to federal judges; Capitol Police recorded more than 8,000 threat cases against members of Congress—suggesting a broader civic deterioration that makes the Service’s numbers directionally credible without pinning down identical rates or compositions.
How we got here: platform dynamics and grievance pipelines
Two structural changes define the last decade’s risk architecture. First, the communications stack inverted: individuals can now publish to millions, join like-minded threat communities, and crowdsource targeting details in minutes. That creates both exposure and velocity—subjects need less offline reconnaissance to feel empowered, and the same affordances supply investigators with more leads. Second, the grievance supply chain thickened. Partisan and geopolitical conflicts produce steady outrage fuel; algorithms reward emotionally charged content; and mental-health stressors raise the baseline of individuals vulnerable to violent ideation. Protective-intelligence programs are built for this world—triaging signal from noise at scale—but their success generates its own paradox: the better you are at catching early signs, the more cases you record, and the more your statistics can be misread as “more violence,” when they often mean “more detection and diversion before violence.”
The agency’s budget testimony reflects this operational truth in budgetary prose—more major events, more standardized protection, more specialized training—and documents a near-60% jump in protective-intelligence investigations in FY2025 over FY2024. That step-change is consistent with both an underlying rise in problematic behavior and the Service’s own expansion of capacity to surface it.
The Secret Service has its hands full these days … battling a surge in the number of threats against the people it's charged to protect. Director Sean Curran tells CBS News there have been 10-thousand threats made against Secret Service protectees so far this year – that a 40… pic.twitter.com/rRHQzjeOUu
— Worldwide News Network (@WorldwideNNX) October 12, 2026
Where reasonable skepticism belongs
Skeptical readers ask the right questions: what exactly is being counted, are definitions consistent across time, and how much of the rise is measurement versus menace? Those are measurement questions, not counters to the existence of a surge. The public materials do not supply a fully harmonized, multi-year time series with stable definitions across protectee classes; they also do not disaggregate outcomes into violent threats, nonviolent harassment, stalking, mental-health diversions, online-only referrals, and validated plots. Such a disclosure would improve interpretation substantially. The most responsible reading today is that the protective-intelligence workload rose decisively, that online accessibility is a major operational driver, and that mental-health factors play a large role alongside ideological motivations.
Implications: resources, doctrine, and public understanding
For policymakers, the central implication is resourcing the upstream work—analytic triage, behavioral assessment capacity, field agents skilled in diversion and stabilization, and technical interfaces with platforms—because most prevention happens before a case ever looks like a “plot.” For the public, the task is linguistic hygiene. When you hear “threats up 40%,” understand that as a surge in the universe of investigated risk, not necessarily a 40% jump in attempted assassinations. That distinction does not minimize danger; it explains how prevention programs succeed. Finally, for platforms and civil society, the data argue for experiments in friction: rate limits on virulent harassment, faster pathways for high-confidence law-enforcement referrals, and better safeguards for individuals in mental-health crisis whose behavior spills into targeted spaces. Those are not speech adjudications so much as safety engineering for a threat landscape where accessibility itself is the accelerant.
Sources:
mediaite.com, secretservice.gov, abcnews.com, cbsnews.com, nbcnews.com
