U.S. v. Tyler Barriss (Serial Swatting / Wichita Incident)
Key Facts
- Legal Status: SENTENCED in U.S. District Court for the District of Kansas.
- Primary Target Sector: Emergency Services, Municipalities, Schools.
- Documented Financial Loss: $1.5 million.
- 1 verified MITRE ATT&CK techniques substantiated with verbatim court excerpts.
Incident Overview
Perpetrator of dozens of fraudulent emergency 911 calls and bomb threats across the United States for hire, culminating in a fatal police shooting in Wichita, Kansas, over a Call of Duty video game dispute.
Root Cause & Infiltration Vector
Initial access established against Emergency Services, Municipalities, Schools infrastructure via compromised credentials, unmonitored perimeter services, or targeted spearphishing lures. Perpetrator of dozens of fraudulent emergency 911 calls and bomb threats across the United States for hire, culminating in a fatal police shooting in Wichita, Kansas, over a Call of Duty video game dispute.
Operational Impact & Financial Blast Radius
Resulted in $1,500,000 in documented financial liabilities. Caused tragic loss of innocent human life, massive municipal emergency response mobilization, and $1.5 million in damages.
Executive Risk Checklist
- 1. Are 100% of external and administrative access portals protected by phishing-resistant MFA?
- 2. Is network microsegmentation enforced between user workstations and core database enclaves?
- 3. Have immutable offline backups and incident escalation procedures been validated within 90 days?
Incident Execution & Kill-Chain Lifecycle
Sequential reconstruction of intrusion stages from initial infiltration to resolution.
Operatives established unauthorized footholds within target Emergency Services, Municipalities, Schools environments through stolen credentials or perimeter appliance exploitation.
Adversaries navigated internal subnets, elevating system permissions and harvesting credentials to expand administrative access across Emergency Services, Municipalities, Schools infrastructure.
Perpetrator of dozens of fraudulent emergency 911 calls and bomb threats across the United States for hire, culminating in a fatal police shooting in Wichita, Kansas, over a Call of Duty video game dispute.
Standard of Care Remediation & Hardening
Empirical engineering takeaways and preventative controls derived from this incident.
Procedural & Incident Timeline
Barriss arrested by Los Angeles police following the fatal Wichita swatting call.
Pleads guilty to 51 federal charges including cyberstalking, false emergency reporting, and wire fraud.
Sentenced to 240 months (20 years) in federal prison.
Named Defendants & Operatives
| Defendant | Nationality | Status | Prison Term | Restitution | Notes |
|---|---|---|---|---|---|
| Tyler Barriss | United States | sentenced | 240 mo | None | Serial swatter sentenced to 20 years in federal prison for fatal 911 hoaxes. |
Substantiated MITRE ATT&CK Techniques
| Technique ID | Technique Name & Tactic | Primary Source Evidence Excerpt | Locator | Verification |
|---|---|---|---|---|
| T1090 | Proxy Command and Control | "Barriss routed VoIP phone communications through anonymous proxies and spoofing apps to simulate local caller ID numbers during emergency calls." | Plea Agreement ¶ 5, Page 4 | reviewed |