Five men scattered across Ohio, California, Missouri, and Nebraska now face federal charges after allegedly organizing a mass-casualty attack on UFC Freedom 250, the mixed martial arts event held on the South Lawn of the White House on June 15, with President Donald Trump and senior government officials in attendance. Court records reviewed by Fox News Digital reveal a plot that allegedly moved from a TikTok community to encrypted Signal chats to tactical training sessions, all in roughly three months.
The alleged plan was layered and deliberate: fly explosive-laden drones over the north side of the UFC venue to trigger a mass evacuation, then position shooters and snipers along the evacuation routes south of the arena to target fleeing officials. Federal prosecutors say the group discussed safe houses, fallback locations, and escape routes that included traveling south along the Potomac River.
And the alleged ringleader? An illegal immigrant from Mexico who was granted DACA status under the Obama administration.
Court records trace the group's origins to around March 2026, when members allegedly found one another through a TikTok community called "Vanguard of the Old." The filings do not clarify whether that was a formal organization or simply an online chat community. But the vetting process was real enough: members allegedly exchanged identification documents, workout videos, and tactical content before migrating to private Signal chats.
By late May, the planning had moved beyond screens. Two California defendants, Bryan Omar Roa and Michael Alan Thomas, allegedly met for an in-person training session. Thomas wrote to the group on May 25, per court records: "Noble and I trained on vehicle dismount, cover vs concealment, bounding, and basic marksmanship today."
That is not the language of idle internet fantasists. Vehicle dismount drills, bounding techniques, cover-versus-concealment distinctions, these are infantry-level skills. The filings do not identify any defendant as having verified military service, though some members allegedly represented themselves online as former military personnel.
By early June, prosecutors say, the group's encrypted chats had shifted squarely to operational planning for UFC Freedom 250. Members discussed a rendezvous point in Fredericksburg, Virginia, where participants from multiple states were allegedly expected to converge before traveling to Washington.
The investigation began not with a sophisticated intelligence intercept but with a mother's instinct. On June 10, the mother of 19-year-old Tycen Proper of Ohio contacted local authorities after growing concerned about her son's recent behavior. She told investigators that members of the group had allegedly expressed anger about government corruption, the Epstein files, U.S. support for Israel, politicians tied to pro-Israel lobbying organizations, billionaires, and "capitalist elites." Some members, she said, believed the U.S. needed to be "torn down" and rebuilt.
Proper's father filled in more details. He told investigators his son had recently met people online, was planning "recons" with them, intended to travel that weekend to meet group members, and had purchased firearms, body armor, ammunition, and tactical gear. The young man had quit his job in preparation for what he described as "missions" and "recons."
Investigators obtained a warrant for Proper's phone. What they allegedly found was a primary Signal chat with approximately 19 participants, along with smaller operational chat groups organized by role and location. The phone also contained maps of Washington, D.C., proposed sniper positions, drone launch sites, and discussions about escape routes.
The threat landscape facing the president and his family has grown alarmingly broad. Separately, an IRGC-linked terrorist allegedly plotted to assassinate Ivanka Trump to avenge the Soleimani killing, a reminder that threats against this president and those close to him come from multiple directions.
The court records describe an organization built with deliberate structure. Tier 1 members were described as "frontline operators expected to carry out missions and acquire firearms and body armor." Additional tiers included drone operators, getaway drivers, recruiters, logistics personnel, technical support, and social media advocates.
Prosecutors say the alleged group leader, an Omaha, Nebraska man known online as "Shepherd", helped build this tiered structure, directed planning discussions, and coordinated members across multiple states through encrypted communications.
But "Shepherd" had a real name. National Review reported that the alleged ringleader is Abraham Hermosillo Alvarez, an illegal immigrant from Mexico who entered the United States on a B2 visa in 2001 and was later granted DACA deportation relief in 2014 under the Obama administration. Acting Assistant Secretary Lauren Bis of the Department of Homeland Security stated plainly: "This illegal alien from Mexico should never have been allowed in our country. He was the ringleader of a failed terror attack targeting UFC Freedom 250 at the White House."
That an illegal immigrant who overstayed his visa more than two decades ago, and was then shielded from deportation by executive fiat, allegedly organized a plot to attack the White House should concentrate the mind on what the DACA program actually enabled in this case.
Just The News reported that all five suspects face conspiracy to commit murder charges carrying a maximum penalty of life in prison. Federal documents identify Alvarez as the "ringleader" of the alleged plot.
A participant interviewed by the FBI in West Virginia told agents that members of the group had allegedly canceled the operation by Friday, two days before the event. The reasons for the cancellation are not specified in the court records described by Fox News Digital.
But federal authorities did not wait to see if the cancellation held. They executed a series of search warrants and arrested suspects on Saturday and Sunday across all four states. UFC Freedom 250 proceeded as scheduled on June 15, with President Trump celebrating his 80th birthday alongside the First Lady, UFC President Dana White, and other senior officials on the South Lawn.
The political violence that continues to orbit this president is without modern precedent. The recent case of Cole Allen, who pleaded not guilty in a separate Trump assassination attempt, underscores how persistent and varied these threats have become.
The case also exposed tensions between federal agencies over when and how to inform the public. Two senior U.S. officials told Fox News that Secret Service leadership wanted to delay disclosing the investigation until additional arrests could be made, fearing that publicizing the probe could alert other subjects and complicate the ongoing investigation.
Deputy Secret Service Director Matthew Quinn addressed the matter at an unrelated event, emphasizing that the Secret Service had "led that investigation from the beginning." He defended the decision to keep the case under wraps:
"In order to maintain the integrity of the investigation and the security plan we chose not to leak it."
Quinn added a colorful warning to anyone inclined to grandstand: "I'll tell you a phrase I learned early in my career in the New York field office and that's don't choke on your own smoke."
FBI Director Kash Patel, who was present at the conclusion of the UFC event on the South Lawn, told Newsmax that agents learned of the threat on June 10 and moved quickly to neutralize it. A joint FBI and Secret Service spokesperson stated: "This weekend's thwarted attack should be a message to any criminal actor that if you target Americans, you will be found and brought to justice." Secret Service Director Sean Curran described "a dramatic rise in threats against our protectees."
Vice President JD Vance offered a more measured assessment on Fox News' "The Five," suggesting the conspiracy never reached the point of imminent danger:
"There was a lot of security there. And it turns out the plot was like, not that advanced. They weren't in town."
Vance acknowledged the broader climate but credited law enforcement for stopping the threat well short of execution:
"They had not really done that much planning. And so, I get why people are so fascinated by it. I do think the political violence and rhetoric in this country is out of control. But thank God we have good law enforcement. We've got good FBI because it didn't even get close to the point of execution."
That political violence and the rhetoric fueling it remain a growing concern. President Trump himself has called for accountability over inflammatory language he believes contributes to the threat environment.
Significant questions hang over this case. Prosecutors have discussed "congressional targets" and "power infrastructure" as additional alleged objectives, but the court records described publicly do not specify which members of Congress or which infrastructure. The total scope of the investigation, whether it extends beyond the five arrested men and the roughly 19 Signal chat participants, remains unclear.
The identity of "Noble," referenced in Thomas's May 25 training message, has not been publicly disclosed. Whether any defendants had actual military backgrounds, or merely claimed them online, is unverified in the filings. And the status of the "Vanguard of the Old" TikTok community, where the group allegedly first coalesced, raises its own questions about platform accountability.
The FBI's track record on national security matters has drawn scrutiny in recent years. The bureau's pursuit of a former Air Force intelligence agent accused of defecting to Iran is just one example of the complex threat environment agents navigate daily.
As many as 23 people participated in the Signal chat where the alleged attack was planned. Five are in custody. The math leaves room for concern, and for more arrests.
The most politically uncomfortable fact in this case is also the most straightforward. The man federal authorities identify as the ringleader of an alleged plot to attack the White House, using explosive drones and sniper teams against the president and senior officials, entered the country illegally, overstayed his visa, and was granted protection from deportation through a program created by executive action. DACA was sold to the American public as a compassionate shield for children who had no say in their parents' decisions. Whatever the merits of that argument in the abstract, this case puts a specific face on the risks that come with shielding people from the immigration system's basic enforcement mechanisms.
A mother in Ohio called the police about her son. That phone call may have saved lives on the South Lawn. The system that was supposed to vet who stays in this country had twenty-five years to get it right, and the alleged ringleader was still here, still protected, and allegedly still planning.
