On August 14, Luigi Mangione pleaded guilty to US federal charges relating to the December 2024 killing of UnitedHealthcare CEO Brian Thompson, a case that has radically altered both the perceptions of corporate security risks and the organizational responses. In this article, Felix Cook examines how Mangione’s plea may have spared corporate security teams from further dangers presented by a high-profile trial and media spectacle, but has not resolved a wider threat environment in which executives are increasingly exposed as symbolic targets, and in which intelligence-led protection, public-footprint management, and stronger information controls are essential to corporate resilience.
On August 14, Luigi Mangione pleaded guilty to US federal charges of stalking resulting in death in connection with the December 2024 killing of UnitedHealthcare CEO Brian Thompson. Mangione admitted to stalking Thompson, shooting, and killing him; although a plea deal was rumored, federal prosecutors instead filed a formal acknowledgement of Mangione’s plea and proposed a sentence of 24 to 30 years, with ultimate sentencing at the court’s discretion. Mangione also faces a range of separate state charges, including second-degree murder, which remain unresolved. Mangione’s admission of guilt marks the latest turn in a dark episode that has brought into sharp relief rising anti-corporate sentiment and transformed the landscape of corporate security, intelligence, and executive protection at a time of rising threat and growing valorization of violence against business leaders.
A watershed attack
Brian Thompson was appointed CEO of UnitedHealthcare, then the largest health insurer in the US, in April 2021. In the early hours of December 4, 2024, Thompson was walking to an annual investor meeting when he was fatally shot on a Manhattan sidewalk. After a high-profile manhunt, authorities ultimately arrested Mangione – a 27-year-old software engineer and Ivy League graduate – in Altoona, Pennsylvania and subsequently charged him in relation to Thompson’s death. Leaked NYPD intelligence analysis reported that Mangione, who suffered from chronic health conditions, was driven by grievances against what he viewed as the “parasitic” US health insurance industry and a grab bag of wider anti-corporate and anti-capitalist sentiments. Per the same analysis, Mangione viewed the killing of Thompson as a “symbolic takedown” of UnitedHealthcare and the wider US corporate sector.
For many within the corporate security space, the attack was the tragic culmination of observable and accelerating risks: increasingly vituperative rhetoric; the radicalizing effects of anonymous, online social media; deepening political and cultural polarization; and the breakdown of civic norms and institutional trust. For corporate boards and executive leaders, the killing was a jarring illustration of a new level of threat to their people and property, made all the more stark by the strongly polarized public reaction. Social media responded with commentary and ‘memes’ mocking Thompson and UnitedHealthcare, with many posters expressing sympathy for Mangione and support for his grievances. Opinion polling after the attack found that 21% of US adults – 1 in 5 – viewed Mangione either very favorably or somewhat favorably, rising to a plurality of Americans under 30. In another survey, 70 percent said the health insurance industry itself held "a great deal" or "a moderate amount" of responsibility for the attack, and a ‘Free Luigi’ movement subsequently became popular online, casting Mangione as a modern folk hero.
The danger of a circus
Mangione’s plea casts the status of his further trials into doubt, the first of which was due to begin in September. Now that he has pleaded guilty to the federal charges, Mangione’s defense team have argued that most of the remaining state charges against him must be dismissed due to the State of New York’s double jeopardy law, under which a person cannot be prosecuted twice for the same offence or separate offences related to the same act. New York prosecutors will likely contest this. For the federal authorities, Mangione’s plea ensures a conviction in a high-profile case rumored to be troubled by procedural and evidential difficulties – earlier terrorism and capital murder charges against Mangione were thrown out by judges, while some of the evidence against Mangione was excluded due to allegedly improper police handling. Given the public sympathy Mangione has attracted in some quarters, the plea also precludes the remote but potentially explosive possibility that a jury might cause a mistrial or acquit him entirely, following a period in which jurors have shown themselves increasingly willing to defy US federal prosecutors in politically contentious cases.
Corporate security teams may breathe a sigh of relief at the avoidance of a lurid trial and accompanying public spectacle. There were already signs that the trial was likely to become a media furor, with public rows breaking out between prosecutors and Mangione’s defense team over juror selection, journalist access, and the credentialing of pro-Mangione social media influencers as court observers. A high-profile trial would likely have reignited public interest in Mangione, provided a platform for his views, fueled further online radicalization, and heightened the risk of copycat attacks. One of the central dangers of both the killing and the admiration it has attracted from a passionate minority is that it may lower the perceived social and personal costs of similar acts, creating a self-reinforcing cycle of violence and notoriety. Some researchers argue that comparable contagion effects are already evident in US mass shootings.
An altered landscape
Corporate America responded to Thompson’s death with a marked increase in spending and resourcing for executive protection, threat intelligence, and other organizational security measures. A 2025 survey by Equilar, an executive data firm, found that 38 percent of S&P 500 companies paid for security for their executives in 2025, up from 24 percent in 2024. The median US company increased its security spending by 136 percent year-on-year, with the largest financial and tech corporations reporting eight-figure spends on executive protection in their annual filings. This increased focus on security has sat uneasily with public perceptions of big business, which have arguably continued to deteriorate since Mangione’s arrest: per Bloomberg, just 37 percent of Americans now report a positive perception of big business and fewer than half trust CEOs to ‘do what’s right’ a lot or even some of the time. Corporations and their executives remain at risk from Mangione-style ‘statement attacks’ by self-radicalizing individuals with no criminal history or apparent radical affiliations. In April, a 20-year-old allegedly attacked the home of OpenAI CEO Sam Altman with an incendiary device winning praise and comparisons with Mangione online. With even the most well-resourced security departments struggling to detect these kinds of ‘lone wolf’ threats in advance, the problem can feel overwhelming.
Thompson was not exposed through any sophisticated breach but by age-old techniques of social engineering, exploiting the corporate instinct to be helpful to a customer and to court a would-be investor.”
Nonetheless, Mangione’s plea provides important new intelligence in the constant fight to tighten security and detect or dissuade threat actors. In his official allocution, Mangione admitted new details of the attack, including revealing that he posed as a high-net-worth investor in order to contact UnitedHealthcare and extract information regarding the December 2024 conference. Thompson was not exposed through any sophisticated breach but by age-old techniques of social engineering, exploiting the corporate instinct to be helpful to a customer and to court a would-be investor. Balancing those business priorities with the increasing necessity of executive protection is now the most vital work of corporate security teams and their external consultants, and begins with understanding a potential target’s digital and public footprint, including their movements, routines, and appearances; monitoring the open environment for the signs of hostility, fixation, and escalation that precede attacks; and conducting appropriate due diligence and cultivating a ‘trust but verify’ mindset toward those seeking information, however innocuous it may seem in isolation.
Conclusion
While Luigi Mangione’s plea marks the beginning of the end of his case, the conditions that produced it remain, and have arguably continued to deepen. Anti-corporate sentiment, online radicalization, and the expansion of ‘statement attack’ risks have produced a durably altered landscape for corporate security professionals and their external partners. Rather than treating it as a passing shock, organizations that adapt to this new normal will be best prepared to defend their executives, property, and people and integrate protection into their day-to-day work in ways that continue to enable good business. The lesson of the Mangione case is not simply that executives need more protection; it is that protection now has to be built into all aspects of how organizations operate.
