The United States is not merely experiencing louder rhetoric; its premier protective service is managing a materially larger and more complex pool of people who telegraph risk, with online dynamics accelerating both discovery and destabilization. That distinction—between more cases in the pipeline and more bullets fired—is the key to understanding today’s threat environment around President Trump and other full-time protectees.
At a Glance
- The Secret Service reports a year-over-year increase of just over 40% in threats involving full-time protectees.
- Roughly 10,000 threat or threat-related cases have been worked this year—an administrative workload, not a tally of attempted attacks.
- Agency leadership cites social media and deteriorating mental health as principal drivers of case growth.
- Official budget testimony shows sharp increases in protective visits and protective-intelligence investigations, confirming operational surge.
What the numbers actually measure—and why that matters
When the Secret Service director tells 60 Minutes that threats against full-time protectees are up “just over 40%,” he is not counting only explicit, prosecutable death threats. Protective-intelligence is broader by design: it captures direct threats, menacing statements, fixation and stalking behaviors, delusional ideation, suicidal spirals that can flip into “suicide by cop,” and online posts that may be ambiguous but material to risk. The agency’s own on-record description makes this clear. The roughly 10,000 figure cited for the year reflects the universe of threat-related investigations and assessments initiated to determine which cases actually pose danger. That is workload—and it is vital workload—but not a one-to-one proxy for attempted assassinations or imminent violent plots.
This distinction is not pedantic. Protective-intelligence has always cast a wider net than criminal law because the mission is prevention. A spike in cases can arise from three non-exclusive sources: real increases in threatening behavior; improved detection and reporting; and changes in thresholds, tooling, or staffing that surface more leads. The Secret Service’s FY2027 budget submission corroborates substantial operational growth—protective visits up from 5,242 in FY2023 to 7,175 in FY2025, and more than 12,300 protective-intelligence investigations in FY2025, nearly 60% above the prior year—evidence that the surge is not just a headline but embedded in daily tasking.
The mechanism: how social media and mental health raise the signal—and the noise
Leadership attributes “a lot” of the increase to the internet: higher accessibility of protectees, faster diffusion of personal information, and algorithmic amplification that can take grievance from private to performative in minutes. The phrase “social media changes people,” used by the director, is less a metaphysical claim than an operational observation: platforms reduce friction for expression and coordination, and they produce copycat dynamics that keep case volumes high. At the same time, the director is explicit that mental health is “for sure” among the biggest factors. Those two forces intertwine; a person in crisis is more likely to broadcast ideation online, which then triggers reports and assessments, swelling the investigative denominator even when no criminal threat was intended.
The agency’s prevention architecture—the behavioral threat assessment model refined over decades—expects that most inbound leads will not culminate in violence. That is the point. Threat assessment sifts the stream, triages outreach to families and clinicians, and escalates only the truly dangerous. The current environment simply sends more water through the pipe.
What changed since “six to eight a day”
In 2017, then–Director Randolph Alles described a long-run average of six to eight threats per day against President Trump—remarkably steady across prior presidencies. That historical benchmark is useful, but it captured a narrower category and a different ecosystem: far less livestreaming, weaker automated detection, and fewer formalized online reporting conduits. The newer 40% jump and 10,000-case universe reflect today’s digitally mediated intake and the Service’s broadened triage of warning behaviors, not merely a leap in explicit, prosecutable death threats.
If you are looking for a single proof point that the danger is real rather than performative, look to recent attempts and serious breaches around President Trump. These incidents, highlighted in the director’s conversation, demonstrate that the tail of the distribution—rare but consequential plots—still exists. But the available public figures do not show a commensurate 40% rise in completed attacks; the growth is clearest in investigations and protective engagements, which is exactly where a prevention-first agency should register it.
Operational data that anchors the claim
Budget testimony provides the administrative scaffolding the public interview can’t: a multi-year expansion in protective visits and a dramatic increase in protective-intelligence investigations managed by the Office of Strategic Intelligence and Information. Those are audited, resourced activities; they drive overtime, training pipelines, and field office bandwidth. The Service explicitly ties the surge to platform dynamics—“social media platforms continue to grow, making threats more prevalent”—and to the rising cadence of high-risk movements for full-time protectees, all of which demand coverage plans, countersurveillance, and local law enforcement integration.
External indicators point in the same direction. Across institutions, threats and harassment of public officials—from federal judges to members of Congress—have grown markedly in recent years, a separate datapoint that makes a generalized deterioration plausible even if each agency uses different definitions and thresholds. Precision on attribution is harder; causality across social media, polarization, foreign influence, and mental health is contested in the literature. But from a protective-operations lens, you do not wait for perfect causal identification to staff to risk; you staff to observed load and the cost of a miss.
Where skepticism properly lives: measurement, not denial
The strongest counterpoint is not that the Service is wrong about growth—it is that “threats” in the public telling collapse unlike things. Counting investigative opens alongside direct violent threats can make the environment seem uniformly lethal. That is a framing hazard, not a falsification. The solution is methodological sunlight: a durable, disaggregated time series separating violent threats, nonviolent threats, stalking and fixation cases, mental-health interventions, online-only referrals, and validated plots. With definitions and inclusion rules in hand, the public could see whether case-mix shifted or if detection alone did.
There is also a perennial incentive problem: any agency seeking resources may emphasize rising danger. That does not mean the figures are inaccurate; it does mean independent review—by the DHS Inspector General or GAO—should validate the 40% and 10,000-case claims against underlying spreadsheets and coding protocols. Congress can and should insist on that level of auditability, with appropriate protection of sensitive methods.
Implications for policy and practice
If the pipeline is permanently wider, three adjustments become non-negotiable. First, capacity: investigative staffing, data-sharing agreements with platforms, and analytic tooling must scale to maintain triage speed; backlog is the enemy of prevention. Second, public-health interfaces: because mental-health crises are a major driver of intake, the Service’s threat-assessment outreach needs formalized, resourced partnerships with state and local providers who can intervene early without criminalizing illness. Third, transparency-by-architecture: publish aggregate, de-identified metrics with stable definitions so the country can distinguish between workload and lethality without jeopardizing operations.
The digital environment is not going to “calm down” on its own. Platform evolutions—ephemeral video, encrypted small-group channels, generative media—will continue to shift where and how warning signs appear. Prevention will hinge on disciplined intake, cross-agency fusion, and the humility to separate what we can measure from what we can stop. On that calculus, the Service’s core claim holds: the work got bigger and faster, because the stream did. Our response has to be equally disciplined—and equally fast.
VIDEO – Secret Service Boss Tells 60 Minutes About ‘Massive Increase’ in Violent Threats During Trump Era: ‘Social Media Changes People’ https://t.co/HOq2X7tjAF
— Grabien (@GrabienMedia) October 12, 2026
Sources:
mediaite.com, secretservice.gov, abcnews.com, cbsnews.com
