Suspect Targets Sam Altman's Home with Molotov Cocktail

Surveillance images and court filings show Daniel Moreno-Gama, a 20-year-old man from Texas, outside Sam Altman's San Francisco residence at approximately 3:37 a.m. on April 10, where prosecutors say he threw a Molotov cocktail that ignited a metal perimeter gate. Less than an hour later he is alleged to have appeared outside OpenAI's San Francisco office, identified as MB1, where he smashed doors and threatened to "burn it down and kill anyone inside." No one was injured.

The criminal complaint and media releases describe forensic and eyewitness evidence that links the same individual to both locations. At arrest officers and investigators recovered multiple items and documents. Key items listed in filings include:

• •incendiary devices, a jug of kerosene, and a blue lighter
• •a 23-page document expressing anti-AI views and calling for violence against AI developers
• •surveillance stills showing a hooded individual tossing an incendiary object at the gate

Federal prosecutors have charged Moreno-Gama with two federal counts: damage and destruction of property by means of explosives and possession of an unregistered firearm. San Francisco authorities, led by District Attorney Brooke Jenkins, added state charges including attempted murder, arson-related counts, and multiple counts that could carry a sentence of 19 years to life if convicted. U.S. Attorney Craig Missakian stated, "if the evidence shows that Mr. Moreno-Gama executed these attacks to change public policy or to coerce government or other officials, we will treat this as an act of domestic terrorism." The FBI conducted search activity at the suspect's Spring, Texas residence, where agents spent several hours collecting evidence.

This incident is a violent escalation in a broader pattern of threats and harassment directed at prominent AI figures and organizations. The combination of a physical attack, a public manifesto, and explicit threats against employees shifts the event from a criminal act to a matter of corporate and public safety, law enforcement coordination, and counter-extremism. For security teams at AI firms and for practitioners engaged in policy and risk work, several practical vectors matter: physical protection of senior staff and offices, threat monitoring for ideologically motivated actors who conflate technology development with existential risk, and legal thresholds for prosecuting ideologically driven violence as domestic terrorism.

Companies should assume that targeted individuals and marquee offices increase the likelihood of copycat threats and should reassess perimeter controls, visitor flows, access logging, and collaboration with local and federal law enforcement. The presence of a written manifesto and the suspect's interstate travel also raise investigative and prosecutorial issues, including use of federal anti-terror statutes, electronic communications analysis, and interagency evidence sharing.

Prosecutors will clarify whether federal terrorism statutes are applied and whether additional charges follow after forensic analysis of seized materials. Security practitioners should monitor guidance from OpenAI and law enforcement about protective measures and threat indicators tied to anti-AI extremism.

Bottom line: The attack is a concrete reminder that debates about AI risk can radicalize individuals. Expect heightened security posture across the sector, closer law enforcement engagement with AI companies, and renewed discussion about how public discourse intersects with personal safety for AI leaders and researchers.