Investigators Reveal Hotel Selfie Taken by Man Charged with Attempting to Assassinate Trump

On the evening of April 25, 2026, roughly 2,600 journalists, politicians, and celebrities gathered in the International Ballroom of the Washington Hilton for the annual White House Correspondents' Association dinner. President Donald Trump had confirmed his attendance weeks earlier. At approximately 8:40 p.m., a 31-year-old hotel guest named Cole Tomas Allen discarded a black coat in a corridor, revealing a 12-gauge shotgun, and sprinted through a magnetometer toward the ballroom [1][2].

He made it to the top of a staircase overlooking the ballroom entrance before Secret Service agents stopped him. An officer wearing a ballistic vest was shot once in the chest — and survived. Allen fell to the ground with minor injuries and was taken into custody [3]. Trump was rushed off the stage. Guests ducked beneath tables [4].

Three days later, federal prosecutors released a trove of evidence — including a mirror selfie Allen took in his hotel room at 8:03 p.m. that evening, showing him outfitted with an ammunition bag, a shoulder holster, and a sheathed knife — and charged him with attempting to assassinate the president of the United States [5][6].

The Evidence: More Than a Selfie

The selfie has dominated headlines, but it is one piece in a broader mosaic of premeditation evidence assembled by the Department of Justice.

Court filings show Allen reserved a three-night stay at the Washington Hilton on April 6, nearly three weeks before the dinner and roughly five weeks after Trump publicly announced on March 2 that he planned to attend [7]. Allen purchased a one-way Amtrak ticket from Los Angeles to Washington, D.C., via Chicago, boarding a rideshare from his Torrance home to Union Station on April 21 [7]. He arrived in Washington on April 24 and checked into the hotel at 3 p.m. [8].

On the evening of the dinner, Allen checked a website tracking the president's schedule at approximately 6:26 p.m. and watched live coverage of Trump's motorcade arriving at the Hilton [7][9]. At 8:03 p.m., he took the mirror selfie. Around 8:30 p.m., pre-scheduled emails were sent to family members and a former employer. In one, Allen referred to himself as a "Friendly Federal Assassin," named Trump and members of his administration as targets, and wrote that he was "prepared to harm others to reach these targets" [10][11].

Prosecutors characterized the attack as "premeditated, violent, and calculated to cause death" and called it "an anti-democratic act of political violence" [5].

How Allen Got Close: The Security Gap

Allen was not a ticket holder, a credentialed journalist, or an invited guest of the dinner. He was a paying hotel guest — and that distinction mattered [12].

The Washington Hilton's lobby remained open to all registered hotel guests during the dinner. Security screening was concentrated closer to the ballroom itself rather than at the building's perimeter [12][13]. A CBS News national security analyst who attended the dinner reported that his own identification was never checked; he entered by showing a screenshot of an invitation on his phone [12].

Surveillance footage shows Allen leaving his 10th-floor room dressed in black, carrying a shotgun, a handgun, and knives inside a black bag. He entered an interior stairwell — bypassing the heavily monitored public corridors and elevators — and descended roughly 10 floors to the Terrace Level. There, he approached the security checkpoint leading to the ballroom, discarded his coat, and ran through the magnetometer holding the shotgun in both hands in a raised position [3][12].

He sprinted at least 60 feet before being stopped, reaching the top of the staircase with a clear vantage point of the ballroom doors — and, beyond them, the president [4].

The Secret Service has pointed to the outcome — Allen was stopped before entering the ballroom — as proof the system worked. Acting Attorney General Todd Blanche called the response "a massive security success story" [14]. But security experts and members of Congress have pushed back. One congressman called the security posture "woefully insufficient," and a retired ATF agent argued the perimeter should have been far larger [14][15]. A Bloomberg security analyst called the incident "a near miss" [16].

The event was not designated a National Special Security Event (NSSE), a classification that would have triggered a higher tier of multi-agency coordination. Critics have asked why, given the concentration of senior government officials in attendance [14].

A Pattern of Threats: Security Incidents Since 2016

The WHCD shooting is the latest in a series of security incidents targeting Trump that has accelerated in recent years.

Source: Wikipedia / DOJ records

Data as of Apr 30, 2026CSV

The most consequential prior incident occurred on July 13, 2024, at a campaign rally in Butler, Pennsylvania, where 20-year-old Thomas Matthew Crooks fired eight shots from an AR-style rifle on an unguarded rooftop 135 meters from the stage. Trump's ear was grazed; rally attendee Corey Comperatore was killed [17]. Two months later, on September 15, 2024, Ryan Wesley Routh was spotted with a rifle in bushes at Trump International Golf Club in West Palm Beach while Trump was on the course. Routh fled and was apprehended; he was later convicted and sentenced to life in prison [17].

In 2024 alone, federal prosecutors also charged Farhad Shakeri and two co-defendants in an alleged Iranian-backed murder-for-hire plot targeting Trump, and Asif Merchant, a Pakistani national with ties to Iran's Islamic Revolutionary Guard Corps, was arrested in Houston on similar charges [17].

Post-Butler Reforms: Were They Enough?

A Senate Homeland Security Committee investigation into the Butler shooting identified a "cascade of preventable failures," including the unguarded rooftop, a failure to share classified threat intelligence with local law enforcement, and the denial of at least 10 resource requests from Trump's protective detail [18][19].

By July 2025 — one year after Butler — the Secret Service reported implementing 21 of 46 congressional recommendations, including streamlined communication procedures, clarified advance-team responsibilities, and the creation of an Aviation and Airspace Security division [20]. Six employees were disciplined with suspensions ranging from 10 to 42 days [20].

But the WHCD shooting has raised fresh questions about whether those reforms addressed the right vulnerabilities. The Butler failures involved outdoor rallies with rooftop sight lines; the Hilton incident exposed a different threat vector — an attacker operating from inside a shared-use building. A former Secret Service agent told NBC News that once advance planning is complete, response becomes reactive, and the Hilton's open-lobby architecture limited how far the perimeter could extend without shutting down the hotel entirely [3][15].

CNN reported that the agency is "stretched thin," with agents pulled in multiple directions by a historically high number of protectees and an elevated threat environment [15].

The Legal Case: Charges and Sentencing

Allen faces three federal counts: attempted assassination of the president under 18 U.S.C. § 1751, interstate transportation of a firearm and ammunition with intent to commit a felony, and discharge of a firearm during a crime of violence [5][6].

Under § 1751, attempted assassination of the president carries a sentence of up to life in prison [21]. The firearms charges carry additional mandatory minimums.

The legal threshold for "attempt" under federal law requires more than mere preparation — prosecutors must show a "substantial step" toward completing the crime that goes beyond planning. The government's case here appears strong on this front: Allen traveled cross-country with weapons, booked a hotel at the event venue, documented his preparations, wrote a manifesto identifying his targets, and physically breached a security checkpoint while armed [5][7]. Federal courts have generally held that breaching a security perimeter while armed constitutes a substantial step well beyond the line separating preparation from attempt.

The DOJ has sought pretrial detention, arguing Allen poses "a danger to the community and a flight risk" [22].

Who Is Cole Tomas Allen?

Allen, 31, holds a degree in mechanical engineering from the California Institute of Technology and a master's in computer science from California State University, Dominguez Hills [23][24]. He worked part-time as a teacher and tutor and developed video games. Parents of students he tutored described him as intelligent, shy, and socially reclusive [23].

His sister told the FBI that Allen had become increasingly involved in left-wing activism in Los Angeles and had begun making "radical statements" [23][10]. He purchased a .38-caliber semiautomatic pistol from a California firearms dealer in October 2023 and a 12-gauge shotgun from a different dealer in August 2025, storing both at his parents' Torrance home without their knowledge [23][25]. His sister said he had begun practicing regularly at a firing range [23].

On a now-deleted Bluesky account, Allen shared posts denouncing Trump administration policies on Iran, Ukraine, and ICE [10]. A pastor at the Pasadena United Reform Church, where Allen worshipped during his Caltech years, described him as a "nice, gentle, smart young man" [23].

Acting Alone — Or Not?

Metropolitan Police said on the night of the shooting that Allen "appeared to be a lone actor" [26]. FBI Director Kash Patel confirmed the Bureau's Behavioral Analysis Unit is involved in the investigation, analyzing Allen's financial records, digital footprint, emails, social media postings, and the manifesto-style writings sent to family members [26][6].

Former FBI special agent Nicole Parker told media outlets that investigators will reconstruct Allen's "pathway to violence" by cross-referencing his weapons purchases, digital activity, and writings to determine whether he was in contact with anyone during the planning stages [26]. As of April 29, Acting Attorney General Blanche said the FBI is still examining whether Allen was operating alone [26].

No co-conspirators have been charged, and no evidence of organizational ties has been publicly disclosed.

The Civil Liberties Question

Allen's case highlights a recurring tension in American security law. He legally purchased his firearms in California. He booked a hotel room at a public venue. He traveled by train. None of these actions, individually, would have triggered law enforcement intervention — and civil liberties advocates argue that is how it should be.

The Harvard Law Review has documented how broadly defined domestic terrorism statutes can be used to target nonviolent activists, and 32 states plus Washington, D.C., now criminalize domestic terrorism in terms that some legal scholars consider overbroad [27]. A proposed federal domestic terrorism statute has repeatedly stalled in Congress over First Amendment concerns [27].

The counterargument is straightforward: Allen's sister told investigators she was concerned about his radicalization, and he was openly acquiring weapons and practicing at a firing range [23]. Whether earlier intervention — a wellness check, a tip to the FBI — could have prevented the attack without infringing on Allen's rights is a question without a clean answer.

Security experts have noted that the Secret Service's threat-assessment model is designed to identify and investigate individuals who make explicit threats against protectees. Allen, according to the available record, did not make direct threats in advance. His social media posts expressed political opposition but did not, apparently, rise to the level that would have placed him on a threat watch list [26]. The gap between protected political speech and actionable intelligence remains one of the hardest problems in protective security.

Premeditation Evidence in Federal Prosecution

The use of Allen's selfie as evidence of premeditation has drawn comparisons to other cases in which attackers documented their preparations. Federal prosecutors routinely use such evidence — photographs, videos, manifestos, and social media posts — to establish that defendants crossed the line from ideation to action.

The 2019 El Paso Walmart shooting, the 2022 Buffalo supermarket attack, and the 2015 Charleston church massacre all involved attackers who left written or digital records of their intent before acting. In each case, prosecutors used that documentation to establish premeditation and secure convictions or guilty pleas with severe sentences.

What distinguishes Allen's case is the specificity of the documentation: a mirror selfie taken 37 minutes before the attack, wearing the exact equipment later recovered from his person, in the same building as the target [5][9]. Combined with the pre-scheduled emails, the cross-country travel with weapons, and the manifesto, prosecutors appear to have an unusually well-documented premeditation timeline.

What Happens Next

Allen appeared in federal court on Monday, April 27, and was ordered held without bail pending further proceedings [4][6]. A preliminary hearing has been scheduled. If convicted on all three counts, he faces a potential sentence of life in prison [21].

The FBI investigation remains open. The Secret Service has announced a security review of the WHCD event. The White House Correspondents' Association has not announced whether the dinner will return to the Washington Hilton in 2027.

The Washington Hilton — the same hotel where John Hinckley Jr. shot President Ronald Reagan in 1981 — is once again at the center of a conversation about presidential security in America [13].