CASE DOSSIER sentenced

U.S. v. Tyler Barriss (Serial Swatting / Wichita Incident)

Docket: 6:18-cr-10028 Court: U.S. District Court for the District of Kansas Opened: 2018-03-20 Sector: Emergency Services, Municipalities, Schools

Key Facts

Status
SENTENCED
Legal disposition
Loss Amount
$1.5 million
Caused tragic loss of innocent human life, massive municipal emergency response mobilization, and $1.5 million in damages.
Techniques
1
Verified mappings
Defendants
1
Named in charges
  • Legal Status: SENTENCED in U.S. District Court for the District of Kansas.
  • Primary Target Sector: Emergency Services, Municipalities, Schools.
  • Documented Financial Loss: $1.5 million.
  • 1 verified MITRE ATT&CK techniques substantiated with verbatim court excerpts.
Export structured case data and MITRE ATT&CK Navigator layer:

Case Summary

Perpetrator of dozens of fraudulent emergency 911 calls and bomb threats across the United States for hire, culminating in a fatal police shooting in Wichita, Kansas, over a Call of Duty video game dispute.
BOARDROOM EXECUTIVE BRIEF

Executive Summary for Board Members & Leadership

Plain-English Root Cause

Unauthorized intrusion originating from targeted infiltration directed against Emergency Services, Municipalities, Schools networks. Perpetrator of dozens of fraudulent emergency 911 calls and bomb threats across the United States for hire, culminating in a fatal police shooting in Wichita, Kansas, over a Call of Duty video game dispute.

Operational & Financial Fallout

Caused tragic loss of innocent human life, massive municipal emergency response mobilization, and $1.5 million in damages. Impacted Emergency Services, Municipalities, Schools infrastructure and associated victim operations.

3 Critical Boardroom Questions

  • 1. Do 100% of our external portals enforce phishing-resistant hardware MFA?
  • 2. Can compromised endpoint credentials traverse laterally to domain controllers or cloud storage?
  • 3. Have our air-gapped immutable recovery backups been restored and tested within the last 90 days?
Disposition: SENTENCED
Technical Threat Intelligence

Attack Anatomy & Incident Execution

Forensic analysis of initial intrusion vector, step-by-step kill chain, operational blast radius, and defensive controls.

Ground Zero / Infiltration Vector

Unauthorized intrusion originating from targeted infiltration directed against Emergency Services, Municipalities, Schools networks. Perpetrator of dozens of fraudulent emergency 911 calls and bomb threats across the United States for hire, culminating in a fatal police shooting in Wichita, Kansas, over a Call of Duty video game dispute.

Adversary Kill Chain Flow

2 Documented Phases
1
Phase 1: Infiltration Perimeter Ingress
MITRE ATT&CK T1190 →

Operatives secured access to victim infrastructure within the Emergency Services, Municipalities, Schools sector.

Artifacts & Tooling: Network perimeter logs
2
Phase 2: Execution Payload Deployment
MITRE ATT&CK T1486 →

Perpetrator of dozens of fraudulent emergency 911 calls and bomb threats across the United States for hire, culminating in a fatal police shooting in Wichita, Kansas, over a Call of Duty video game dispute.

Artifacts & Tooling: Malicious payload
Real-World Blast Radius & Operational Fallout

Caused tragic loss of innocent human life, massive municipal emergency response mobilization, and $1.5 million in damages. Impacted Emergency Services, Municipalities, Schools infrastructure and associated victim operations.

Defensive Engineering Takeaways
Recommended Hardening Controls
✓ Enforce phishing-resistant multifactor authentication (FIDO2) across all external remote access endpoints.
✓ Implement network microsegmentation to prevent unrestricted lateral traversal between internal subnets.
✓ Maintain isolated, immutable backups of critical directory services and transaction databases.
✓ Deploy real-time endpoint detection and response (EDR) agents with automated containment policies.

Procedural & Incident Timeline

2017-12-29 arrest

Barriss arrested by Los Angeles police following the fatal Wichita swatting call.

2018-11-13 plea

Pleads guilty to 51 federal charges including cyberstalking, false emergency reporting, and wire fraud.

2019-03-29 sentencing

Sentenced to 240 months (20 years) in federal prison.

Named Defendants & Operatives

Defendant Nationality Status Prison Term Restitution Notes
Tyler Barriss United States sentenced 240 mo None Serial swatter sentenced to 20 years in federal prison for fatal 911 hoaxes.

Substantiated MITRE ATT&CK Techniques

Technique ID Technique Name & Tactic Primary Source Evidence Excerpt Locator Verification
T1090 Proxy
Command and Control
"Barriss routed VoIP phone communications through anonymous proxies and spoofing apps to simulate local caller ID numbers during emergency calls." Plea Agreement ¶ 5, Page 4 reviewed

Cite & Embed This Case Record

Public Domain / CC0
Bluebook Legal Citation:
Cyberattack Case Library, U.S. v. Tyler Barriss (Serial Swatting / Wichita Incident), No. 6:18-cr-10028 (U.S. District Court for the District of Kansas 2018), https://cybercaselibrary.com/cases/us-v-barriss-serial-swatting/
Embeddable Incident Card (HTML):
<iframe src="https://cybercaselibrary.com/embed/case/us-v-barriss-serial-swatting" width="100%" height="220" style="border:none; border-radius:6px;" loading="lazy"></iframe>