Threat & Crisis Response

We conduct discreet investigations into threats, harassment, extortion, stalking, leaks, impersonation, and other hostile activity, helping clients identify responsible actors, understand their capabilities and intent, and determine the seriousness and potential trajectory of the threat.

Standard assignments include

• Attribution and identity resolution — Identifying individuals or groups behind anonymous, malicious, or threatening activity.
• Threat actor profiling — Mapping backgrounds, digital footprints, affiliations, relationships, and relevant history to understand capability, intent, and potential escalation.
• Harassment and stalking investigations — Investigating persistent or escalating conduct across digital and physical environments.
• Extortion and blackmail investigations — Identifying actors, assessing credibility and motive, and supporting clients and counsel in managing coercive threats.
• Leak and information exposure investigations — Identifying the source, extent, and potential impact of unauthorized disclosures.
• Impersonation and malicious online activity — Investigating fake accounts, fraudulent identities, targeted abuse, and other harmful digital activity.
• Reputational attacks and coordinated campaigns — Investigating organized efforts to damage an individual, organization, or brand through false narratives, harassment, or manipulation.

When a threat requires action, we help clients move quickly from understanding the problem to managing it. We combine intelligence and investigative capabilities with the ability to deploy protective personnel and other security measures as circumstances require. Through a deep global network of former law enforcement professionals, military operators, and other security specialists, we can rapidly mobilize experienced personnel in the United States and internationally while coordinating the broader legal, investigative, communications, and operational response.

Standard assignments include

• Threat assessment — Evaluating credibility, intent, capability, access, and potential for escalation.
• Protective deployments — Rapidly deploying experienced protection agents and other security personnel in the United States and internationally in response to active or emerging threats.
• Secure transportation and movement — Arranging vetted drivers, protective transportation, route planning, and other measures to move individuals safely during heightened-risk situations.
• Residential and location security — Deploying personnel and implementing immediate protective measures at residences, workplaces, hotels, events, and other relevant locations.
• Rapid research and intelligence — Quickly developing relevant information on actors, events, relationships, and emerging risks.
• Real-time monitoring and escalation tracking — Tracking developments across open-source, social, and other relevant environments as situations evolve.
• Surveillance and counter-surveillance — Deploying lawful capabilities to identify suspicious activity, document patterns, and inform investigative and protective decisions.
• Law enforcement liaison — Preparing referrals, organizing evidence, and supporting engagement with appropriate authorities.
• Response coordination — Coordinating protective, investigative, legal, communications, technical, and other specialist resources as circumstances evolve.

We support clients confronting sudden events that create immediate legal, operational, reputational, security, or personal consequences. Our role is to establish reliable facts quickly, identify emerging risks and decision points, and provide the intelligence, investigative support, and coordination needed to manage the situation as it develops.

Standard assignments include

• Rapid fact development — Establishing what happened, what is known, what remains uncertain, and what requires immediate investigation.
• Crisis intelligence and situational awareness — Developing and continuously updating the information decision-makers need as events unfold.
• Executive and organizational incidents — Supporting response to arrests, allegations, leadership events, misconduct, or other developments with immediate consequences.
• Security and safety incidents — Supporting clients following incidents involving individuals, residences, facilities, workplaces, events, or other sensitive environments.
• Cyber and information incidents — Providing investigative intelligence, exposure analysis, and coordination alongside technical and legal advisers following breaches, leaks, extortion, or other digital events.
• Reputational and public-facing crises — Assessing narratives, relevant actors, information flows, and escalation risks surrounding rapidly developing controversies or allegations.
• Stakeholder and exposure analysis — Identifying affected parties, key relationships, vulnerabilities, and potential secondary consequences.
• Protective and operational response — Deploying or coordinating protection agents, secure transportation, location security, and other immediate measures when a crisis creates heightened risk to people or property.
• Real-time monitoring and briefings — Maintaining situational awareness and providing decision-makers with timely updates as circumstances change.
• Response coordination — Helping align counsel, security, communications, technical specialists, law enforcement, insurers, and other relevant parties around a coordinated response.