Two years after the attempted assassination of Donald Trump in Butler, Pennsylvania, the core facts of the case are settled—the shooter was quickly identified and investigated—but public access to what federal agencies know, and how they failed, remains sharply constrained.

Key Points

• The gunman, 20-year-old Thomas Matthew Crooks, was identified by the FBI within roughly a day of the attack and later found to have acted alone, without a clear motive.
• Multiple investigations have documented major Secret Service failures in planning, communications, and perimeter security that rendered the attack preventable.
• Freedom of Information Act requests and partial document releases show the FBI holds tens of thousands of pages related to Crooks and Butler, but only a tiny fraction has been released, fueling criticism over transparency.
• Watchdog reports and congressional inquiries fit a historical pattern: detailed findings about security lapses emerge, while key forensic and investigative records remain withheld for years.

What Happened in Butler: The Core Facts

On July 13, 2024, Donald Trump was addressing a campaign rally at the Butler Farm Show grounds when shots were fired from a nearby rooftop. Secret Service personnel and local law enforcement quickly returned fire, killing the gunman. One attendee, Corey Comperatore, was fatally shot, Trump’s ear was grazed, and several others were injured. Within hours, federal authorities described the incident as an attempted assassination of a former president.

By the next day, the FBI publicly identified the shooter as Thomas Matthew Crooks, a 20‑year‑old resident of Bethel Park, Pennsylvania. Crooks had used an AR‑style rifle and positioned himself on the roof of the American Glass Research building just outside the rally’s secured perimeter. Subsequent technical work—on-site reconstruction, ballistic analysis, and review of communications—confirmed the basic sequence: Crooks surveilled the venue, gained rooftop access, fired multiple rounds toward the stage, and was then neutralized by a Secret Service sniper.

Identification, Motive, and the Scope of the FBI Investigation

Contrary to social media claims that the shooter was “never identified,” the FBI not only named Crooks publicly but also described the investigation’s early contours in an August 2024 briefing. Officials stated that they had found no credible evidence of co‑conspirators, no indication of foreign direction, and no clear ideological motive, although Crooks’s online history showed a “blend of ideologies” and extensive research into campaign events.

That investigation was not cursory. According to later reporting and FBI updates, technical specialists accessed Crooks’s phone and analyzed his electronic devices and accounts, mapping searches from 2019 to 2024 and identifying detailed planning in the months before the rally. A comprehensive review—led by the FBI in coordination with the Justice Department’s National Security Division, the Secret Service, and ATF—ultimately concluded in November 2025, with the finding that Crooks acted alone and without a clearly identifiable motive.

Yet the depth of internal work contrasts sharply with what the public can see. Judicial Watch litigation and subsequent reporting suggest the FBI holds at least 75,000 documents related to Crooks and the Butler incident, including investigative files, forensic reports, and communications logs. Only a small fraction—on the order of tens of pages at a time—has appeared in the FBI’s public “vault,” heavily redacted. The agency has repeatedly cited national security exemptions and Trump’s status as a victim in justifying withholding, leaving large portions of the investigative record effectively invisible.

Secret Service Failures: A Preventable Attack

If the identity of the shooter is not in serious dispute, the same cannot be said of the performance of the U.S. Secret Service. A series of investigations—internal reviews, a Department of Homeland Security Inspector General report, and a bipartisan congressional task force—have converged on a stark conclusion: the Butler attack was preventable and exposed systemic vulnerabilities in presidential protection.

The DHS Inspector General’s report, released nearly two years after the shooting, documents five critical failures. First, communications between local law enforcement and the Secret Service largely broke down. Local officers transmitted more than one hundred radio messages about a suspicious individual near the perimeter, but Trump’s protective detail received only a handful of phone calls and texts and was never formally alerted that a potential gunman was being tracked. A unified communications room—standard practice for high‑risk events—was never established, leaving agencies on separate, malfunctioning systems.

Second, the Secret Service’s counter‑drone posture was inadequate. Crooks flew a drone over the rally site for several minutes earlier in the day, apparently using it to survey the stage and surrounding structures. The agency’s counter‑drone system was either not functioning or not properly deployed, and the operator lacked training and had not tested the equipment in advance, allowing the flight to go undetected. A narrow drone no‑fly window that lapsed as Trump’s schedule slipped created a gap in coverage that Crooks exploited.

Third, perimeter and line‑of‑sight security were deficient. Investigators found that rooftop vantage points outside the fenced area were known risks and that Secret Service personnel had proposed positioning trucks to block any elevated shot toward the stage. Campaign staff reportedly resisted that plan, concerned about obstructing television camera angles, but the Inspector General and outside experts have emphasized that the protective detail retains ultimate authority over security measures regardless of campaign preferences.

Fourth, chronic understaffing and fatigue limited the agency’s ability to implement robust protection. The DHS report situates Butler within longer‑term resource strain at the Secret Service: too few agents, stretched across too many protectees and events, increasing the likelihood that standard redundancies—extra counter‑snipers, specialized communications staff, full perimeter teams—will be thinned or omitted.

Congressional review was blunt. Senator Rand Paul’s Homeland Security and Governmental Affairs Committee labeled the failures “inexcusable” and detailed how only one Secret Service agent reported hearing radio traffic about Crooks before shots were fired, despite local officers’ belief that they were broadcasting warnings “to everybody.” At a House task force hearing, a former special agent testified that once a suspicious person is identified near a presidential venue, the detail leader and shift agent must be immediately notified and empowered to delay or cancel the event; that did not happen in Butler.

Transparency, FOIA, and Institutional Opacity

As the investigative and oversight record accumulated, another pattern emerged: institutional opacity. FOIA requests to the FBI, DHS, and Secret Service have yielded few documents and many denials, often justified by ongoing investigation claims or national security exemptions. Even basic forensic records—autopsy findings for Crooks, precise ballistic trajectory reports, and time‑of‑death documentation—have not been routinely released in the way that has been common in other cases of political violence.

When the FBI did post roughly forty heavily redacted pages to its public reading room, they were revealing less for their content than for what they implied about the larger, unseen file. Interview notes showed a rally attendee warning about open access beyond the fence line and a Butler law enforcement official describing how multiple operators were “communicating information about the unknown male” across radios before Trump took the stage, only for that “unknown male” to become the shooter. These details aligned with the congressional task force’s broader finding—only one agent acknowledged hearing the transmissions—but the partial release underscored how much of the narrative remains locked in internal repositories.

This is not an anomaly. The Secret Service’s own Exceptional Case Study Project has documented a recurring pattern after presidential assassinations and attempts: rapid identification of the attacker, followed by years of constrained document access and periodic declassification, often driven more by political pressure than by an internal commitment to transparency. Butler fits neatly into that model. Despite withering public criticism and formal findings of “cataclysmic failure,” key records that would allow outside experts to fully reconstruct decision‑making—complete communications logs, detailed protectee movement timelines, internal disciplinary files—are still largely unavailable.

Conspiracy Claims Versus the Evidentiary Record

The combination of a high‑profile attack, demonstrable protective failures, and limited public access has, predictably, fueled conspiracy narratives. On social platforms, some commentators have asserted that the assassination attempt was “staged,” that Crooks was a patsy, or that the CIA orchestrated the attack. None of these accusations is supported by the available investigative record.

Official findings from the FBI, corroborated by independent reporting, point consistently to a lone actor who planned an attack over months, exploited identifiable security gaps, and was killed on scene by a Secret Service sniper. Watchdog and congressional reports criticize incompetence, miscommunication, and resource strain; they do not identify evidence of deliberate collusion to endanger Trump or to choreograph the event for political optics. Claims that the FBI has “never investigated” Butler collapse under the weight of documented technical work, multi‑agency collaboration, and a formally closed investigation with published conclusions.

What is real are the failures and the opacity. The Secret Service has conceded serious shortcomings and announced reforms, from improved inter‑agency information sharing and more rigorous line‑of‑sight assessments to strengthened counter‑drone deployment and staffing adjustments. The FBI acknowledges that motive remains unresolved and that some aspects of Crooks’s mindset may never be fully understood. Neither agency, however, has embraced broad transparency over the underlying case file, leaving space in which speculation thrives.

Why Butler Matters Going Forward

The Butler assassination attempt sits at the intersection of two long‑running American anxieties: the physical safety of presidents and the trustworthiness of federal institutions. On one side, the event is a case study in how a determined attacker can exploit communication seams and resource constraints even against a premier protective agency. On the other, the aftermath illustrates how limited document release and cautious public briefings can erode confidence, especially in an era where alternative narratives spread instantly.

For citizens trying to make sense of Butler, the key distinction is between what is known and what is not. It is settled that Crooks existed, planned, and acted alone; that the attack killed an innocent attendee and came within inches of killing a former president; and that the Secret Service failed in ways that have now been formally acknowledged and studied. It is not settled why Crooks did it, whether additional, undisclosed security lapses occurred, or precisely how internal culture and resource decisions at the Secret Service contributed to the breakdown.

Historically, substantial portions of presidential security case files only enter the public record decades later, if at all. Butler is likely to follow that trajectory. Pressure from Congress, watchdogs, and litigants may pry loose more pages from FBI and Secret Service archives over time, but detailed reconstruction will depend on those releases. In the meantime, the case’s most important function may be as leverage: a concrete, recent reminder that even in a highly surveilled age, effective protection depends on basics—clear communications, tested technology, adequate staffing, and a willingness to subordinate optics to safety.

Institutional Lessons for an Era of Persistent Threats

Viewed against the longer arc of presidential protection, Butler is less an outlier than a warning. Threat environments have diversified, with drones, long‑range rifles, and online radicalization complicating the task the Secret Service was originally built to perform. Yet the failures in Butler were not exotic; they were failures of coordination, planning, and follow‑through.

Whether future events avoid similar outcomes will depend less on the rhetoric surrounding Butler than on whether agencies internalize its lessons. The DHS Inspector General, congressional reports, and independent experts have effectively handed the Secret Service a blueprint: institutionalize joint command structures, harden perimeters beyond nominal venue lines, ensure technological countermeasures work and are staffed by trained operators, and backstop overtaxed personnel with realistic staffing plans. None of this requires perfect foresight—only an acceptance that in the mathematics of protection, known vulnerabilities must be closed before an adversary steps onto a rooftop.

Sources:

joehoft.com, politico.com, youtube.com, spotlightpa.org, taskforce-kelly.house.gov, hsgac.senate.gov, abcnews.com, cbsnews.com, facebook.com, secretservice.gov, bbc.com, en.wikipedia.org, pbs.org, congress.gov