What Is “Leakage”?
In threat assessment, leakage means the person planning an attack communicates their intent to do harm to someone else before the act, on purpose or by “slipping” hints.
That communication can be direct (“I’m going to shoot up the school”) or indirect (cryptic posts, violent stories, hints about a “big day”), but the key is that it reveals real intent – not just generic dark talk.
Leakage can be:
- Verbal (comments to friends, family, coworkers)
- Written (notes, journal entries, school assignments)
- Digital (texts, DMs, social media, forum posts, videos, gaming chats)
- Symbolic (lists, drawings, public displays of weapons coupled with threats)
How Often Does Leakage Occur?
The striking – and tragic – fact is that most school shooters and many mass killers do leak their plans in some way.
- U.S. Secret Service reports on K–12 plots show the vast majority of student attackers shared their plans or threats with other people – often peers – before an attack or a disrupted plot.
- A large study of 170 U.S. mass public shooters (1966–2019) found that 46.5% communicated an intent to do harm ahead of time; leakage was especially common among younger and school‑based shooters.
- Clinical/forensic work by Meloy and others notes that in school shootings and public‑figure attacks, leakage appears in a majority, and sometimes nearly all, cases—even though it is often ignored or minimized at the time.
For prevention, this means the question is often not “was there a warning?” but “did anyone recognize it and act on it?”
What Leakage Looks Like in School Shooters
You’ll see recurring patterns across cases. These are typical forms of leakage in school and campus attackers:
- Explicit threats and boasts
- Talking about “shooting up the school,” “making them pay,” “going out in a blaze,” or “doing something like Columbine.”
- Direct or indirect warnings: telling specific friends not to come to school on a certain day, or hinting that “something big” will happen.
- Attempts to recruit or impress
- Trying to pull others into the plan (“come with me,” “you want in on this?”) or fishing for reactions by describing attack fantasies.
- Showing off weapon collections or target lists, sometimes partly framed as “jokes” but with persistent, angry fixation.
- Digital leakage
- Social media posts, DMs, or forum content praising previous school shooters or mass killers, sharing attack blueprints, or fantasizing about their own “headline moment.”
- Videos or images with weapons, tactical gear, or staged “shooter” poses, especially when paired with grievances or countdown‑type captions.
- Creative and academic work
- Essays, stories, or art assignments turned in to teachers that graphically depict school shootings or revenge‑massacres, sometimes with self‑insert characters and real‑world references.
- Drawings of specific classrooms, hallways, or hit lists, occasionally discovered shortly before attacks.
Leakage exists on a spectrum – from clumsy, half‑joking hints to detailed, almost confessional descriptions of what the person plans to do. The more specific and persistent it becomes, the more it moves from noise to critical warning.
Cry‑for‑Help vs Performance Leakage
Not all leakage serves the same psychological function. Two broad patterns show up in mass‑shooter research:
- Cry‑for‑help leakage
- Often tied to severe distress, suicidality, and mental health problems.
- The person talks about wanting to die, about “not caring if they live,” about hurting people who hurt them, and sometimes mixes self‑destruction with revenge.
- In the mass‑shooter dataset, leakage was most often associated with this cry‑for‑help model—especially among younger shooters and those with prior contact with mental health systems.
- Performance or fame‑seeking leakage
- Leakage here is about identity and notoriety – wanting to be known, feared, or remembered.
- You see boastful language, references to previous shooters (“I’ll beat his score”), manifestos, branding, and efforts to build an audience before the attack.
- This form tracks more with ego, grievance, and self‑importance than with obvious despair.
In analysis, you can frame leakage as a window into the offender’s internal narrative: are they pleading to be stopped, or advertising their “grand finale”?
Leakage vs “Dark Talk”: Where’s the Line?
Plenty of adolescents and young adults use violent humor, edgy memes, and dark fantasy content. That’s not all “leakage.” Threat‑assessment professionals look for a cluster of features:
- Specificity
- Naming a school, workplace, or group; mentioning weapons; talking about dates or times; describing methods.
- Moving from general anger (“I hate this place”) to operational details (“I know the camera blind spots,” “I’d start in the cafeteria”).
- Repetition and escalation
- The content doesn’t stay a one‑off joke; it recurs, escalates, and becomes more detailed or confident over time.
- Convergence with other warning behaviors
- Weapon acquisition, target surveillance, fascination with previous mass attacks, isolating, grievances, and identification with past shooters (“they finally understood”).
Dark humor exists everywhere online; leakage is where fantasy fuses with grievance and planning, and the person starts to signal that they might actually act.
Why Leakage Is So Critical for Prevention
Leakage matters because it’s one of the rare, consistent points where bystanders can intervene:
- Research on averted school attacks shows that in many disrupted plots, a peer noticed leakage and told an adult or authority figure, which triggered investigation and prevention.
- NTAC reporting emphasizes that nearly every student attacker engaged in observable concerning behaviors – including leakage – before the attack; these are often known to classmates long before adults find out.
- In the mass‑shooter study, leaked intent was associated with prior mental health contact and higher suicidality, which means intervention can address both threat and self‑harm risk.
Leakage is not trivia or “drama” – it’s one of the clearest chances to stop a shooting before it starts.
How Threat‑Assessment Teams Use Leakage
In professional threat assessment (law enforcement, schools, workplaces), leakage is treated as a major warning behavior, not a guarantee of violence. It feeds into a structured evaluation:
- Gathering context
- Who heard or saw the leakage? How many times? How explicit?
- What’s the history – bullying, grievances, mental health issues, previous threats?
- Evaluating capability and planning
- Access to weapons, tactical knowledge, rehearsal behaviors (practice at ranges, timing routes).
- Whether the person has moved from talk to concrete steps (lists, diagrams, purchases).
- Access to weapons, tactical knowledge, rehearsal behaviors (practice at ranges, timing routes).
- Intervening, not just punishing
- Safety planning, contacting guardians, mental health evaluation.
- Increasing supervision, restricting access to weapons, and addressing grievances in a structured way rather than shrugging off the “jokes.”
Leakage shows us that most school shootings and many mass attacks don’t erupt from nowhere – they build over time, and the offender often broadcasts pieces of their intent in ways other people can see and hear. When those “slips” are ignored, they become chilling footnotes after the fact; when they’re recognized and reported, they can be the difference between a fantasy that ends in intervention and a plan that ends in bodies.
FOR READERS FASCINATED BY CRIMINAL MINDS
From the creators of Violent Minds comes Murder.net - a psychological cyber-thriller about control, fear, and obsession, where a killer streams his murders online to paying subscribers. How far would you go to stop a monster?
Get The Book
