Global | Apparent threat to CEOs emerges online

• The creators of the website appear to have been inspired by Luigi Mangione, who is accused of killing the CEO of UnitedHealthcare in December 2024
• In our analysis of the list, we assess that it probably does not point to a genuine threat to attack corporate leaders

We have recently become aware of a website that provided the personal information of several thousand corporate executives. Its creators appear to support Luigi Mangione, who has been charged with killing the CEO of UnitedHealthcare last December. Based on our analysis of the list and the muted online reaction to it, we assess that it probably does not point to any specific plans to attack corporate leaders. Instead, we suspect the main motivation was to encourage attacks and prompt alarm among corporate leaders and their security teams.

Website creators seemingly inspired by CEO shooting in December

What was titled a ‘CEO database’ appeared on a website called luigiwasright.com. It is unclear how long it was online, but we became aware of it yesterday, 29 May. The site now seems to have been removed, either by its creators or the host. Nevertheless, some of its contents are still available through an internet archive site.

Rather than a highly curated list of potential targets, the list seems to be a bulk collection of personal data. It provided the name, job title, email address, mobile number and LinkedIn profile of figures from 1,061 companies. Many of those listed are major US-based firms in a variety of sectors. But some are local businesses, including a restaurant and a dentist, as well as government agencies and NGOs. The list also contains several duplicates and ‘companies’ that are employment statuses, such as ‘unemployed’.

The creators seem to be encouraging violent attacks against corporate leaders. From what we have seen, the website creators did not state any affiliation with a particular group or ideology. Based on a blurb accompanying the list, they appear to share the views of anti-capitalist users on mainstream social media platforms and extremist forums, who have expressed support for Mangione since last year. Indeed, the creators claimed their website was ‘a tool to demand accountability from corporate leadership’.

We have not seen anything to suggest the creators were using the information to plan attacks against the people mentioned. While mostly accurate, much of the personal information seems to be publicly available, such as from professional databases, such as LinkedIn. It is also plausible that it was gathered using web scraping tools and accessing leaked data. The list also only appears to contain professional information (such as work email addresses). From what we have seen, personal details like home addresses do not appear anywhere on the list.

The apparent attempt to encourage attacks does not seem to have gained traction on public channels online. Users of both mainstream social media platforms and the anti-capitalist groups we monitor do not appear to have noticed the publication of the list; they have made no mention of it, as far as we have seen, and there do not appear to be any copies of it being shared on these platforms. The list does not appear to have been picked up on among users of other extremist or hacktivist channels.

Attacks against corporate leaders likely to be extremely rare

We continue to assess that attacks against corporate leaders are highly unlikely to become common in the coming years. The emergence of the list is consistent with other generic threats that anti-capitalist individuals who have praised Mangione have made recently. We have also not seen any evidence that organised groups are planning on mounting attacks, or that doing so is their general intent. In our assessment, most anti-corporate activists will almost certainly use non-violent tactics, such as protesting outside corporate offices.