Private Security for High Net Worth Family Under Threat

Private security for high net worth family members named in threats

Private security for high net worth family members has to begin with an uncomfortable fact: a threat against one person can put an entire household at risk. The person making the threat does not necessarily need access to the principal. A spouse may answer the front door. A child may leave school at a predictable time. A household employee may accept a delivery without knowing that the name on the package deserves additional scrutiny.

I have spent years working in executive protection and residential security, including protecting families whose daily lives depend on privacy, predictable routines and the ability to move between home, work and public settings without unnecessary disruption. One lesson has stayed with me: protecting the principal is not the same as protecting the family.

When a threat names a spouse, a child or a residence, I want to understand the complete situation before deciding what security measures are justified. Who received the threat? What exactly was communicated? Does the person making it know where the family lives? Has anyone attempted contact in person? Is the threat connected to a specific grievance, or is there evidence of preparation for physical action?

These questions matter because a family needs a proportionate response, not simply a visible security presence. My broader framework for evaluating these decisions is explained in our 2026 guide to high net worth security. In this article, I want to focus on a narrower problem: what changes when threats extend beyond the principal and reach the people who share the home, manage the household or depend on the same daily routines.

The answer involves several connected responsibilities: documenting threats, securing the residence, controlling access, protecting children, coordinating with law enforcement and deciding when residential officers or close protection are warranted.

Key takeaways

• A threat against a family member changes the security picture. The response should consider the spouse, children, household staff, residence and regular movements, not just the individual named in the original message.
• An exposed home address creates a practical security problem. Once a location is known to someone making threats, access procedures and the handling of unexpected visitors deserve particular attention.
• Family members need simple, consistent instructions. Everyone should know whom to contact, how to handle an unknown visitor and when to avoid direct engagement.
• Children require age-appropriate protection. School arrangements, activity schedules, authorized pickups and the handling of photographs should be considered together.
• Threat evidence should be preserved. Original messages, letters, delivery records and incident details can help investigators assess what happened.
• Private security and law enforcement have different roles. Security personnel can observe, document, manage access and respond within their authority; criminal investigations and enforcement remain matters for the appropriate agencies.
• The right level of protection depends on the circumstances. A documented threat does not automatically require a permanent residential detail, but a credible threat involving an identified family member or known address deserves a structured assessment.

A four-year sentence for threats against a wife and children

On October 14, 2026, the U.S. Attorney’s Office for the Middle District of Florida announced a federal sentence that illustrates why threats against family members should not be dismissed as background noise.

According to the Department of Justice announcement dated October 14, 2026, Andrew Nikhil Aiyar, 28, of Temple Terrace, Florida, was sentenced by U.S. District Judge Steven D. Merryday to four years in federal prison for interstate threats to kill. He pleaded guilty on July 28, 2026. According to court documents and evidence admitted at the sentencing hearing, as summarized in the announcement, between September and November 2025 Aiyar sent harassing and threatening messages to people associated with a media company. One of them was Alissa Walsh, the wife of media personality Matt Walsh, and the announcement says he posted public social media threats to kill her and members of her family, including statements that he would find her the next time he was in Nashville and threats of violence against her children.

The case was investigated by the FBI and the Temple Terrace Police Department. Its significance for home security for high net worth individuals is straightforward: threats can name people who are not the public figure in the family but who are still part of the target’s immediate household. The risk is not confined to the person whose name is better known.

I do not need to speculate about the offender’s motivations to draw a practical lesson from this case. When threats explicitly identify a spouse or children, the security assessment should reflect that fact. The family should not have to wait for someone to appear at the residence before basic precautions are considered.

That does not mean every online threat requires armed officers outside a home. Threat assessment must distinguish between the content of a message, the apparent intent behind it, the available information about the person responsible and any evidence of movement toward physical action. A threat made repeatedly, combined with knowledge of a family’s address or attempts to contact relatives, presents different questions from an isolated, vague insult.

The important point is that the assessment must include the people named in the threat.

What I would examine first

My initial review would establish a clear timeline and identify what is actually known.

• The threat itself: What was said or communicated? Was a particular family member named? Was there a stated intention, deadline or reference to a location?
• The contact history: Has the individual sent repeated messages, contacted relatives, approached a workplace or appeared at a residence?
• Knowledge of the family: Does the individual appear to know the home address, school, workplace, travel arrangements or other relevant details?
• Evidence of escalation: Has communication moved from online statements to letters, calls, deliveries or physical appearances?
• Current exposure: Are family members continuing to follow routines that could make an unexpected encounter easier?
• Existing safeguards: Who controls the front entrance, receives deliveries, manages visitors and communicates with the family when something unusual happens?

This is not a prediction exercise in which one alarming phrase determines the outcome. It is a process for separating verified facts from assumptions and identifying what needs attention immediately.

If the evidence suggests an imminent danger, the family should contact emergency services rather than wait for a private security assessment. In other circumstances, a prompt report to the appropriate law enforcement agency, combined with a documented review of residential and personal security, can establish a more informed response.

For me, the operational question is simple: what could happen next, who might be exposed, and what reasonable measures can reduce that exposure without unnecessarily disrupting the household?

A stranger at the door, and the spouse who answered

On October 15, 2026, a report from San Antonio described a different type of situation: an alleged stalking case in which, according to police, contact moved from a threatening letter to an unannounced visit at a family residence.

According to a FOX San Antonio report published October 15, 2026, police records show that Stephen Garrity, 48, of Florida, arrived at the Fair Oaks Ranch home of retired Air Force General David Goldfein on September 6, contacted Goldfein’s wife at the residence, identified himself by name and said he would “like to have a word” with Goldfein. Goldfein was not home, and after being told so, Garrity left the property. Police said the first contact was reported in February, when Goldfein received a letter from Florida that investigators described as containing vulgar language and threats. Goldfein and his wife say they do not know Garrity, and the report said the visit prompted the family to take firearms training. Garrity was arrested and charged with stalking, a third-degree felony in Texas.

These are allegations. Garrity has been charged, not convicted, and I am relying only on what the police records and the report describe. Even so, the reported sequence raises an important residential security question: what happens when a person who has already made threatening contact appears at the house and the intended recipient is absent?

The spouse becomes the person managing the encounter.

That is precisely why I do not treat the front door as an administrative detail. A residence can have cameras, a substantial perimeter wall and a controlled driveway, yet the household can still be unprepared for an unexpected visitor. A doorbell rings, someone looks through the glass, and the person answering must make a decision in seconds.

A good plan should make that decision easier.

The front door is a security decision point

When I review home security for high net worth individuals, I want to know how an unknown person moves from the public side of the property to direct contact with a family member.

The relevant questions include:

• Can a visitor reach the front door without passing through a controlled entrance?
• Can the household identify a visitor without opening the door?
• Is there a reliable way to communicate with a gatehouse or residential officer?
• Do family members know how to handle an unexpected visit when the principal is away?
• Can staff distinguish a scheduled appointment from an unverified claim of urgency?
• Is there a clear process for reporting repeated visits or suspicious behavior?

These questions are about the household’s ability to make consistent decisions under pressure. They are not about making the property look intimidating.

If a person has already issued a credible threat, the household should not be expected to improvise a response when that person appears. Family members should not open the door simply to establish the visitor’s identity, explain why the principal is unavailable or satisfy a demand to speak with someone inside.

Instead, the plan should establish a safe way to communicate without granting access. A designated person can verify the visitor through an independent channel, contact security and call law enforcement when the circumstances warrant it. If the visitor is threatening, attempting entry or creating an immediate danger, occupants should move away from the point of contact and seek emergency assistance.

The specific response will depend on the layout of the property and the nature of the threat. A family living in a gated estate with a staffed entrance has different options from a family in a residence where the front door opens directly onto a public walkway. Both need a defined procedure.

Why a family script matters

I favor short instructions that people can remember rather than complicated protocols that are rarely practiced.

A household might establish the following rules:

• Unknown visitors are not admitted merely because they request the principal by name.
• Family members do not confirm whether a particular person is home.
• Visitors are not allowed to bypass normal verification because they claim to represent a business, authority or personal acquaintance.
• A person who behaves threateningly is not confronted to obtain an explanation.
• Unusual visits, repeated appearances and attempted access are reported promptly to the designated security contact.
• Threatening or potentially criminal conduct is reported to law enforcement, with emergency services contacted when there is immediate danger.

These rules should be adapted to the household and explained to everyone who may answer the door, including domestic staff, childcare providers and temporary personnel.

The wording matters less than consistency. If one family member refuses entry while another routinely opens the door to anyone who claims to have an appointment, the household has an avoidable gap.

This is one reason that security for UHNW family offices must extend beyond the principal’s personal detail. The family office may manage schedules, household administration, travel arrangements and vendor relationships, but the residence is where those responsibilities meet real people and physical access. A plan that exists only in an executive’s calendar or an office procedure is not enough.

The person answering the door needs to know what to do, whom to contact and when not to engage.

What the threat data on public officials shows

Public officials face a particular form of exposure: their names, professional responsibilities and public appearances can make them identifiable to people who have no legitimate reason to contact them. The risks do not necessarily stop when they leave the office. Their spouses, children, homes and ordinary routines can become part of the same targeting pattern.

An investigation by The New York Times, published on October 11, 2026, in The Philadelphia Inquirer, documented the extent of this problem. Drawing on records obtained through Freedom of Information Act requests, court documents and law enforcement logs, it found that over a two-year period from 2024 to August 2026, at least 44 governors, along with their staff members and families, had been subjected to violent threats, as had at least 70 senators and at least 185 members of the House of Representatives. The investigation reported that the threats targeted spouses, parents, siblings and children.

The investigation described the practical consequences for affected households. Dozens of officials fortified their homes, installed cameras and hired private security guards, often at their own expense, and some changed their daily routines, moved their children to new schools or removed personal information from the internet. In one case it described, a state lawmaker urged her family to move in with relatives after a picture of her home was posted online. In another, a senator’s parents’ home was the target of a swatting call in the middle of the night. A former chief of the Capitol Police also recalled a member of Congress who was mailed a photograph of their young child walking a dog in their neighborhood, with only the words “cute dog” written on it.

These findings concern public officials, not the high-net-worth population as a whole. I would not use them to claim that wealthy families face the same rates of threats or that every household with public visibility is in immediate danger. They do, however, illustrate a relevant security problem: hostility directed at a prominent individual can extend to relatives and private residential locations.

For families who are not elected officials, the circumstances may be different. A business dispute, a highly publicized legal conflict, a public controversy or unwanted attention surrounding a family member may create a different set of concerns. The common issue is that the person making threats may decide that contacting a relative or appearing at a home is a way to reach the intended target.

That possibility changes how I approach high net worth security.

The family is part of the exposure

A principal may have a professional team, a controlled office entrance and an established travel procedure. The spouse may have none of those safeguards during an ordinary trip to the grocery store. A child may follow a school schedule that is known to dozens of people. A household employee may answer the telephone or sign for deliveries without knowing that a particular name or address has become relevant to a threat.

The protection plan has to account for these differences.

I start by mapping the actual people and places involved rather than assuming that the principal is the only person who matters. This includes the immediate family, relevant staff, regular destinations and anyone who routinely handles access to the residence.

The objective is not to place a security officer beside every family member throughout the day. That would often be unnecessary and could interfere with normal family life. It is to determine where a credible threat could intersect with an ordinary routine and establish sensible safeguards at those points.

For one family, the priority might be the residence and the way visitors are screened. For another, it might be a child who attends several activities at different locations. For a third, it might be close protection for a spouse who has received direct threats and continues to travel independently.

This is where family office high net worth individuals security becomes a practical coordination issue. The family office, household manager, residential security team and the people responsible for personal security for high networth individuals in the family need to understand which information they should share, who has authority to make changes and how an urgent concern reaches the right person.

A threat affecting one part of the household should not depend on someone remembering to forward an email to the rest of the team.

Why visibility alone does not establish the right response

When a family becomes concerned, there can be pressure to make a visible change immediately. More officers, additional vehicles or a conspicuous security presence may feel like evidence that action is being taken.

But visible activity is not the same as effective risk reduction.

If the principal receives a threatening message while the residence remains unaware of the situation, adding a person to the principal’s daily detail may not address the immediate gap. If a spouse is receiving unwanted visits, the family needs a procedure for managing those visits. If a child’s school schedule has been exposed, the family needs to review the information being shared and the arrangements for authorized pickups.

The response should follow the exposure.

That is also why I distinguish between a temporary increase in precautions and a long-term protection program. A specific incident may justify an immediate change while the facts are assessed. A continuing threat may justify a more sustained residential presence, dedicated close protection or both. The decision should be reviewed as new information becomes available.

A useful security program gives the family a clear explanation of what has changed, why the change is necessary and what conditions would allow the measures to be reduced or adjusted.

How the home address gets out

A family does not have to publish its home address deliberately for that address to become discoverable. Residential information can appear in multiple places, and seemingly harmless details can make it easier to connect a person to a particular location.

I have discussed the wider privacy issue in our article on how public records and property ownership expose UHNW families to targeting. For this article, the relevant question is narrower: once a family member has been threatened, how should the household determine whether its residential location or routines are exposed?

There is no single source to check. The review needs to consider the ways a person might connect a name, a family relationship and a physical address.

Property and public records

Depending on the jurisdiction and circumstances, property records and other publicly accessible documents may associate a person with a residence. Business records, professional biographies and other public material may provide additional connections.

A family should not assume that using a company or trust in connection with property ownership automatically makes the residence impossible to identify. Nor should it assume that every record containing an address presents a meaningful danger.

The relevant task is to identify what information is publicly accessible, determine whether it creates a practical exposure and consult appropriate legal or privacy professionals when changes to ownership records or other filings are being considered.

There may be legitimate legal, financial or administrative reasons why certain information must remain available. Security planning should take those obligations into account rather than promise complete anonymity.

Social media, photographs and family announcements

Photographs and public posts can reveal more than the person sharing them intends.

A family photograph may show the front entrance, a distinctive architectural feature, a street sign or a recognizable view from the property. An announcement about a child’s school event may identify a location and date. A household member may post a photograph of a delivery, a vehicle or a gathering that connects otherwise separate pieces of information.

None of these details automatically establishes a threat. The concern is how information can be combined, especially when someone is already attempting to locate or contact a family.

My recommendation is to review public-facing information in context. Which photographs identify the property? Which accounts regularly publish location information? Are children’s names, schools and activity schedules being shared more widely than the family realizes? Can household staff and other relevant personnel follow the same privacy expectations?

This should be a proportionate review, not a demand that the entire family abandon social media.

Deliveries, vendors and visitors

The residential address is not the only information that matters. An individual may already know where the family lives but lack a clear opportunity to approach it. Alternatively, a person may learn the address and then attempt to establish a reason for gaining access.

Deliveries and service appointments create legitimate reasons for unfamiliar people to approach a residence. That is normal household activity, and security procedures must accommodate it.

I want the household to know which deliveries are expected, who can authorize entry, how appointments are verified and how exceptions are handled. A visitor should not gain access merely by claiming that a family member or employee is expecting them.

Staff should also avoid disclosing unnecessary information about the household. There is rarely a good reason for a delivery driver or unverified caller to learn when a particular family member will return, whether a child is home or how long the principal will be away.

These controls should be established before a crisis whenever possible. Once a credible threat exists, the family may need a more restrictive temporary procedure.

What to do after discovering an exposed address

If the family learns that its residence has been identified by someone making threats, I would separate the response into three immediate tasks.

First, preserve the evidence. Record where the information appeared, when it was discovered and how it relates to the threat. Retain original messages, screenshots, relevant links and other material that could help establish the sequence of events.

Second, assess the physical implications. Has the individual merely identified the address, or have they communicated an intention to visit, attempted contact or appeared at the property? Is there evidence of activity at the residence that requires immediate intervention?

Third, review the controls that govern access to the home. Depending on the circumstances, this could include changing visitor procedures, informing residential personnel, reviewing the entrance and perimeter, and coordinating with law enforcement.

If the address has been posted publicly alongside an immediate threat, the family should not wait for a full assessment before seeking appropriate assistance.

Home security for high net worth individuals when the address is public

Once a residence is known to a threatening individual, the security question changes from whether the address can be kept private to whether the property can be approached and entered without authorization.

This is where physical security matters.

For home security for high net worth individuals, I evaluate the property as a connected system: the perimeter, vehicle and pedestrian entrances, doors, windows, visitor procedures, detection systems, communications and response arrangements. The purpose is to understand how an unauthorized approach would be detected and what would happen next.

A camera can record an incident. A gate can delay access. A residential officer can assess a visitor and communicate with the household. An alarm can notify designated personnel of a defined event. These functions are related, but they are not interchangeable.

Start with the perimeter and approach

The first question is whether the household can distinguish normal activity from an approach that requires attention.

On some properties, a controlled driveway entrance provides a natural point for screening visitors. On others, the residence may have several pedestrian approaches, adjoining public space or boundaries that are difficult to observe from a single position.

The assessment should account for the actual layout rather than rely on a generic checklist.

I examine how people approach the property, which entrances are routinely used, where visibility is limited and how an unexpected visitor would be handled. I also consider whether landscaping, lighting, gates and existing detection systems support the intended procedures.

The aim is not to turn every residence into a fortress. It is to establish appropriate layers of protection so that one missed observation or one incorrectly handled visitor does not defeat the entire plan.

Detection must lead to a response

A common weakness in residential security is treating equipment installation as the end of the project.

A camera may record a person approaching a gate without anyone reviewing the footage until after an incident. An alarm may activate without a clearly defined person responsible for evaluating it. A visitor may be visible on a monitor while the household has no agreed procedure for deciding whether to grant access.

A functioning system needs a clear relationship between detection, assessment, communication and action.

For example, if a person associated with a known threat appears at the entrance, the person monitoring access should be able to identify the concern, prevent unauthorized entry, notify the appropriate security contact and contact law enforcement when warranted. The family should not have to make every decision without relevant information.

This is one reason I favor integrating technology with trained personnel and documented procedures. Technology helps people see and communicate what is happening. It does not eliminate the need for judgment.

At MSB Protection, we also have in-house research and development to counter threats to UHNW clients, with an interest in how technology can support practical protection and improve the information available to personnel.

Decide whether residential officers are warranted

Not every household requires a permanent residential security team. The decision depends on the nature of the threat, the property’s layout, the family’s exposure and the ability of existing safeguards to address the risk.

A temporary threat may justify a limited increase in coverage while investigators assess the situation. A continuing threat involving a known address, repeated unwanted visits or credible indications of attempted access may justify a more sustained presence.

When I assess a potential residential detail, I consider what officers will actually be responsible for. Their duties may include monitoring entrances, verifying visitors, documenting unusual activity, communicating with household management and coordinating the response to security incidents.

The staffing model should reflect those responsibilities and the hours during which the risk needs to be managed. It should also account for handovers, training and continuity so that critical information does not disappear when one officer finishes a shift.

Families considering residential security from MSB Protection should understand that the purpose of a residential team is not simply to have someone visible at the gate. The team needs a defined role within the wider household security plan.

When a security assessment should come first

If a family has received a threat but does not know what measures are justified, I would begin with a structured review of which high net worth security services are justified rather than assume that a particular staffing arrangement is necessary.

A residential security assessment can examine the property, existing procedures, access points, communications and the relationship between the reported threat and the household’s current safeguards.

The outcome should identify practical priorities. Some may require equipment changes or improved procedures. Others may involve staff training, a revised visitor process or coordination with personal protection personnel. A more serious exposure may warrant additional officers or close protection.

The point is to connect each recommendation to an identified problem.

A family should be able to understand what a proposed measure is intended to accomplish, how it fits into the wider plan and who will be responsible for operating it.

Who answers the door: a family script

A written security procedure is useful only if the people who need it can follow it without hesitation. That is especially important when the person dealing with an unexpected visitor is a spouse, an older relative, a childcare provider or a household employee who has never received formal security training.

I want every relevant person to understand three things: what they are authorized to do, what they should avoid doing and whom they should contact when something does not feel right.

The procedure should be straightforward enough to remember during an ordinary day.

Establish a consistent response to unknown visitors

The household should agree that an unknown visitor does not automatically receive access because they know the principal’s name, claim to have an appointment or say that someone inside is expecting them.

Where possible, visitors should be verified through an independent communication channel. If someone claims to represent a company, for example, the household can contact the known company representative using an established number rather than relying on the information provided by the visitor.

Family members should not be expected to investigate a suspicious person themselves. They do not need to establish the person’s identity through a confrontation or open the door to hear an explanation.

If a visitor is associated with a known threat, the household should follow its specific threat-response procedure. If the person attempts to force entry, makes an immediate threat or otherwise presents an urgent danger, occupants should move to a safer location and contact emergency services.

The same principle applies when a visitor claims to have an urgent personal message. Urgency should not override verification.

Give household staff clear authority

Staff members can become an unintended weak point when security procedures are vague or when they believe that questioning a visitor would be impolite.

A housekeeper may assume that a contractor has already been approved. A nanny may believe that a delivery driver has permission to enter. An estate manager may approve a last-minute appointment without realizing that the visitor’s name has appeared in a recent threat report.

These situations do not necessarily reflect carelessness. They often indicate that the household has not clearly defined its procedures.

I want staff to know which visitors they can admit, which decisions require approval and how to escalate an unusual request. They should also understand that they will not be criticized for refusing an unverified visitor while seeking clarification through the proper channel.

The rules must be consistent across shifts and personnel. Temporary staff and new employees should receive the same relevant instructions as established members of the household.

Where a threat has been identified, the estate manager and security lead should agree on any temporary restrictions and communicate them to the people responsible for access.

Protect family privacy during ordinary conversations

An effective procedure also limits what household members disclose to people who do not need the information.

A visitor does not need to know whether the principal is travelling, when a spouse will return or which school a child attends. Staff should not confirm household schedules simply because someone asks in a friendly manner.

This does not mean treating every stranger as a threat. It means applying sensible information boundaries consistently.

For a family facing a credible threat, I would make these boundaries explicit and ensure that the household understands how to respond when someone asks questions about a particular family member.

Children, schools and activities

Protecting children requires a different approach from protecting an adult principal. Children may not understand why a stranger is asking about their family, and they should not be expected to make complex threat assessments.

The objective is to build simple, age-appropriate habits while ensuring that responsible adults have clear procedures for responding to unusual activity.

A family should review the child’s school arrangements, regular activities, transportation and authorized pickup procedures together. These are connected parts of the child’s daily routine, and a change in one area may affect the others.

Our separate article on school-run security for UHNW children in Los Angeles examines the specific challenges of protecting children during transportation and school transitions. When a family member has been threatened directly, those arrangements should be reviewed in the context of the current threat rather than treated as a routine scheduling issue.

Coordinate with the school

Where a credible threat affects a child or creates a reasonable concern about someone approaching the family, parents should communicate with the appropriate school administrator and establish a clear point of contact.

The school needs enough information to take appropriate precautions, but the family should avoid circulating sensitive details unnecessarily.

Depending on the circumstances, the discussion may cover:

• Who is authorized to collect the child.
• How changes to pickup arrangements are verified.
• How staff should respond if an unfamiliar person asks for the child.
• Who should be notified if someone repeatedly appears near the school.
• How the school should contact the parents or designated security representative about an incident.
• Whether temporary adjustments to transportation or dismissal procedures are appropriate.

The family should confirm how these instructions will be communicated to the staff members responsible for carrying them out. A restriction known only to one administrator may not help if the person managing dismissal has not received it.

Any proposed change should also account for the child’s welfare and ordinary educational needs. Security should support the child’s ability to attend school and participate in activities, not automatically remove those opportunities.

Teach children what they need to know

Children do not need to be told every detail of a threat investigation. They do need to know what to do if someone they do not recognize approaches them, asks them to leave with them or claims that a parent has sent them.

Instructions should be appropriate to the child’s age and understood well enough to use without prompting.

For younger children, that may mean staying with a designated adult and never leaving with someone without the established permission. Older children may also need to know how to contact a parent or trusted adult, what to do if their normal pickup arrangement changes and how to report an uncomfortable interaction.

Parents should avoid placing the burden of protection on the child. The child is not responsible for identifying a threatening person or deciding whether a particular incident is serious enough to report.

The adults managing the situation carry that responsibility.

Review photographs and activity information

Children’s schedules and locations can be exposed through routine family posts, school announcements, activity photographs and public event listings.

The appropriate response is not necessarily to remove every photograph or prohibit all online activity. It is to understand which information is publicly visible and whether sharing it creates an unnecessary exposure in the context of a known threat.

A family may decide to delay publishing photographs from a location, limit the visibility of school information or ask relatives not to share identifiable details about the children’s activities.

These measures should be proportionate to the circumstances. A credible threat involving a specific child warrants a more focused review than a general concern about online privacy.

Protect routines without unnecessarily restricting family life

A family under threat may feel pressure to cancel activities, change every schedule or keep children at home. Sometimes temporary changes are justified. But disruption should be guided by the actual circumstances rather than fear alone.

I would examine the specific exposure, the available alternatives and the measures that could allow the child to continue normal activities with appropriate safeguards.

For example, a temporary change to a pickup arrangement may address an identified gap without requiring a permanent change of school. Additional adult supervision may be appropriate for a particular activity, while other activities may continue under existing arrangements.

The objective is to reduce exposure while preserving as much normal family life as reasonably possible.

Reporting threats so they can be prosecuted

Private security personnel can help a family identify unusual activity, preserve records and communicate relevant observations. They do not replace law enforcement, and they should not attempt to conduct criminal investigations beyond their authority.

When a family receives a threat, I want the information preserved in a form that can be understood later by investigators, legal counsel and the people responsible for protection.

A statement that someone sent a threatening message is a starting point. The original message, its date, the account or telephone number involved, the surrounding communications and any subsequent physical contact may provide a much clearer record.

Preserve original evidence

Families should avoid deleting threatening messages simply because they are upsetting. Where safe and appropriate, they should preserve the original communication and retain relevant context.

Useful records may include:

• Original emails, letters, voicemails and messages.
• Screenshots that show the relevant content and available date or account information.
• A chronological record of communications and physical encounters.
• Delivery records, visitor logs and relevant access-control information.
• Relevant camera footage preserved before it is overwritten.
• Names of witnesses and a factual account of what they observed.

Records should distinguish direct observations from assumptions. If a person is seen outside the residence, for example, the record should describe what was observed and when, rather than automatically conclude that the person was conducting surveillance.

Do not alter original evidence or circulate sensitive material more widely than necessary. Access should be limited to the people who have a legitimate role in managing the incident.

Where a communication platform or service provider may hold relevant records, investigators or legal counsel can advise on appropriate preservation and reporting procedures.

Report the threat through the appropriate channels

The correct reporting route depends on the circumstances. An immediate threat to life or an active attempt to enter a residence warrants emergency assistance. Other threatening communications or suspected stalking can be reported to the appropriate local law enforcement agency, which can determine whether referral to another agency is appropriate.

When the conduct may involve interstate threats or another federal offense, federal authorities may also have a role. Families should not have to decide the legal classification of an incident before making a report.

The Aiyar case discussed earlier demonstrates why preserving and reporting threats can matter beyond the immediate security response. The Department of Justice announcement of October 14, 2026 describes a case that resulted in a federal prison sentence following a guilty plea.

That outcome does not mean every threat will lead to an arrest or prosecution. Investigators must evaluate the evidence and applicable law. It does show why a family should not assume that a threatening message is irrelevant simply because it was communicated online.

Establish a single reporting process inside the household

The family should know where new incidents are reported and who is responsible for making sure that the information reaches the right people.

Without a defined process, a spouse may report an unusual visit to an estate manager, who mentions it informally to a security officer, while the person responsible for reviewing the threat remains unaware.

A central incident record can help avoid that fragmentation. It should identify the date and nature of the event, the evidence available, the person who received the report and any action taken.

The process should also specify when law enforcement must be contacted, who is responsible for preserving relevant footage and how changes to the threat assessment are communicated to the household.

Confidentiality matters. Threat reports may contain sensitive family information, personal communications and details about daily routines. They should not be accessible to everyone simply because they work for the household.

Keep security observations factual

There is a difference between documenting a concern and accusing someone of a crime.

An unfamiliar person appearing near a residence may be entirely innocent. Repeated unwanted contact, a threatening communication and an unannounced visit may warrant further investigation, but the facts should be recorded accurately.

Security personnel should avoid making unsupported claims about a person’s motives, background or intentions. They should report what they observed, preserve relevant evidence and allow the appropriate authorities to determine what the evidence establishes.

That discipline protects the family as well as the integrity of the investigation.

When to add officers or close protection

Not every threat requires the same level of intervention. A family may need better visitor controls and a more consistent reporting process, while another may face circumstances that justify residential officers, personal protection or a combination of the two.

I make this decision by considering the relationship between the threat and the family’s actual exposure.

Has the individual merely communicated hostility, or have they identified a specific family member? Do they know where the family lives? Have they appeared at the residence or attempted to contact relatives? Is the principal the only person at risk, or are several family members being named? Can existing safeguards address the identified problem?

These questions help determine where additional protection may be useful.

When residential officers may be appropriate

A residential team can be relevant when the main concern involves the home, access to the property, repeated unwanted visits or the need for a consistent response to unusual activity.

Depending on the assessment, responsibilities may include monitoring entrances, verifying visitors, maintaining incident records, communicating with the family and coordinating with responding agencies.

The team needs clearly defined procedures and an understanding of the threat. Simply placing officers at a property without explaining what they are expected to monitor or how they should respond to relevant incidents does not establish an effective program.

Staffing and coverage should also reflect the actual requirements. If the household needs continuous coverage, the plan must account for shift changes, handovers and continuity of information. If the need is temporary, the arrangements should specify how the situation will be reviewed.

When close protection for family members may be justified

Close protection for UHNW families becomes relevant when the risk follows an individual beyond the residence.

Personal security for high networth individuals is often pictured as a detail for the principal alone, but a spouse who has received direct threats may need the same assessment of routine movements, appointments and transportation. A family member who has been approached unexpectedly may need assistance managing transitions between home, work and public settings. In other cases, the principal may need a coordinated plan that includes relatives because the same threat affects the entire household.

The decision should not be based solely on social status or the visibility of a person. It should reflect the nature of the threat, the individual’s circumstances and the protection measures that can reasonably reduce exposure.

A protection detail also needs to preserve the person’s independence where possible. Family members should be able to understand how the arrangements work, communicate concerns and continue normal activities within the agreed plan.

When both residential and personal protection are needed

Some threats affect the residence and individual family members at the same time, which is when home security for high net worth individuals and close protection for UHNW families have to operate as one plan. In those circumstances, separate teams or functions may need to coordinate.

Residential personnel may be responsible for visitor screening and incident reporting, while close protection personnel manage an individual’s movements and immediate security requirements. The family office or designated household manager may coordinate schedules and ensure that relevant changes are communicated.

The boundaries between those responsibilities should be clear. A residential officer should not assume that someone accompanying a family member has already received a change in the threat assessment. A protection officer should not assume that the residence knows about a new concern simply because it was discussed during a shift.

A shared reporting process and defined communication responsibilities help reduce those gaps.

What separates recommended HNW security teams from the rest

When evaluating recommended HNW security teams, I would look beyond presentation and staffing numbers. I have set out a longer list of questions in a separate article on evaluating HNW security teams, and the same tests apply when a family is under threat. The important question is whether the people responsible for protection can explain how their work addresses the family’s identified risks.

Can they describe the responsibilities of each role? Do they document incidents consistently? Can they coordinate with household staff without disclosing unnecessary information? Do they understand how residential procedures and close protection fit together? Is there a defined process for reviewing new threats and adjusting the response?

The team should also be able to explain its limits. Private security personnel do not possess the same powers as police, and a professional response should recognize that distinction.

I would expect a family to receive clear operational procedures, appropriate reporting, trained personnel and an explanation of how the protection arrangements will be reviewed. Those are practical indicators of a structured service, not promises that no incident will ever occur.

Review the measures as circumstances change

Threats evolve, and the response should be capable of evolving with them.

If an investigation identifies new information, the family may need to change its procedures. If a visitor who was previously unknown is identified and the concern is resolved, certain temporary measures may no longer be necessary. If further contact occurs, additional precautions may be justified.

The review should consider both security and the impact on family life. Excessive restrictions can create their own operational problems, particularly when children, household staff and multiple residences are involved.

A well-managed plan should document the reasons for its measures, identify who can authorize changes and establish when the arrangements will be reassessed.

Bringing family protection into one coordinated plan

The central issue in protecting a family under threat is not simply how many security officers are present. It is whether the family, residence and daily routines are covered by a coherent response.

That begins with understanding the threat and identifying who may be affected. It continues with preserving evidence, controlling access to the home, reviewing children’s routines and establishing a reliable way for family members and staff to report unusual activity. When the circumstances justify additional protection, residential security and close protection for UHNW families should work within the same overall plan.

In security for UHNW family offices, the family office has an important coordination role, but it should not become a bottleneck through which every urgent decision must pass. Household staff need clear instructions, security personnel need defined responsibilities and family members need to know when to seek help.

I also believe that privacy and physical protection should be considered together. Removing unnecessary public information may reduce exposure, but it cannot replace effective residential procedures. Cameras and alarms may improve detection, but they cannot substitute for a reliable response. Close protection may address risks during movement, but it does not automatically secure the home.

Each measure has a purpose, and each needs to fit the family’s actual circumstances.

For families looking at the wider subject, our 2026 guide to high net worth security provides the broader context for evaluating residential protection, personal security and the systems that connect them. When a threat specifically involves a spouse, a child or a known home address, the priority is to translate that broader framework into clear, practical steps for the people who need them.

The standard I work toward is straightforward: the family should understand the plan, know who is responsible for each part of it and have a reliable way to respond when something changes.

Frequently asked questions

What does private security for high net worth family members cover?

Private security for high net worth family members can include residential access control, threat assessment, incident documentation, close protection, coordination with household staff and procedures for responding to suspicious visits or threatening communications. The appropriate services depend on the threat, the residence, the family’s routines and the existing safeguards. A structured assessment helps determine which measures are justified.

How does family office high net worth individuals security handle threats to relatives?

Family office high net worth individuals security should establish a clear process for communicating threats to the people responsible for protecting the household. That may involve the family office, residential security personnel, close protection officers, household management and law enforcement. The process should identify who receives reports, who can authorize changes and how relevant information is shared without unnecessary disclosure of sensitive family details.

When should a family add residential officers after receiving a threat?

Residential officers may be appropriate when a threat creates a continuing concern about access to the home, repeated unwanted visits or the need for consistent monitoring and incident response. A single threatening message does not automatically justify permanent coverage. The decision should consider the credibility and specificity of the threat, whether the address is known, any physical approaches and the effectiveness of existing safeguards. Immediate danger requires emergency assistance.

What should a family do if a threatening person knows its home address?

Preserve the relevant messages and other evidence, assess whether the person has attempted physical contact and review the procedures governing visitors and access to the residence. Report the threat to the appropriate law enforcement agency, and contact emergency services if there is an immediate danger. Depending on the circumstances, the family may also need a residential security assessment and temporary changes to its access procedures.

How do families choose high net worth security services when children are threatened?

Families should look for a structured approach that addresses the residence, school arrangements, authorized pickups, daily activities, communications and the handling of threatening incidents. The people responsible for protection should have clear roles, documented procedures and an appropriate way to coordinate with parents and school administrators. Children should receive simple, age-appropriate instructions without being made responsible for assessing threats themselves.

Sources

• U.S. Attorney’s Office, Middle District of Florida, Temple Terrace Man Sentenced to Four Years for Interstate Threats to Kill, October 14, 2026
• FOX San Antonio, Florida man arrested for stalking retired four-star general at Fair Oaks Ranch, October 15, 2026
• The Philadelphia Inquirer (New York Times), America’s elected officials are living in fear, October 11, 2026

---

About Michael Braun

Michael Braun is a former Special Unit Operator, former Manager at Gavin de Becker & Associates, and Founder & CEO of MSB Protection, an executive protection and residential security firm serving high-net-worth and ultra-high-net-worth clients.

Braun has built his career at the intersection of specialized protective operations, executive protection, residential security, protective intelligence, and security risk management. His experience spans special-unit operations, leadership within Gavin de Becker & Associates, and the development and oversight of private protection programs within demanding UHNW environments.

He has been recognized by The Top 100 Magazine as a leading CEO in the private security field and is the subject of an upcoming Marquis Who’s Who feature highlighting his leadership and contributions to the profession.

Today, Braun is recognized for his work in executive protection, UHNW estate security, residential protection, protective intelligence, adversarial security assessments, and security auditing throughout Beverly Hills and Southern California.

His work focuses on moving private security beyond simply “providing a body” and toward intelligence-led, risk-based protection programs designed to identify vulnerabilities before an adversary can exploit them.

---

Looking for Executive Protection or Residential Security Services?

If you are a high-net-worth or ultra-high-net-worth individual, family office, estate manager, chief of staff, or executive in Beverly Hills, Los Angeles, Malibu or Southern California, MSB Protection provides executive protection, residential security, 24/7 protection, protective intelligence, medical-readiness planning, and security risk management.

We evaluate the complete security environment, from threat exposure and residential vulnerabilities to personnel, technology, procedures, protective intelligence, and emergency response, and build a program around the risks that actually exist.

Contact us for a confidential consultation or message us at +1 (805) 285-2807.