New details have emerged suggesting the man who attempted to assassinate Donald Trump at a July 2024 rally in Butler, Pennsylvania, may have had a significant digital footprint. This challenges earlier reports suggesting he left little trace online.
According to a column by Miranda Devine, Thomas Matthew Crooks, the alleged shooter, operated at least 17 online accounts across various platforms. These included DeviantArt, YouTube, Google Play, and others, where he reportedly engaged with content ranging from political material to niche internet subcultures. Devine also claims that Crooks used gender-neutral pronouns and showed signs of shifting political ideologies in the years leading up to the attack.
Initial FBI reports after the shooting indicated Crooks had no social media presence and no publicly posted manifesto. However, Devine’s reporting suggests Crooks had been politically active online, with activity going back as far as 2017. She points to changes in his online behavior beginning around 2020, with more erratic and extreme language reportedly appearing over time.
The FBI has since stated it reviewed hundreds of thousands of files, conducted over 1,000 interviews, and examined multiple electronic devices as part of its investigation. FBI Director Christopher Wray and officials continue to maintain that Crooks acted alone and did not publicly reveal his motives in advance.
Despite the FBI’s position, questions remain about how a digital trail of this size could have gone unnoticed or unreported for months. The potential gap between official conclusions and new independent findings has prompted renewed interest in the case.
Crooks opened fire from a rooftop during Trump’s campaign rally, injuring the president in the ear and killing one attendee. The attack is still considered a lone-wolf act with no confirmed ties to extremist groups.



