Sam Altman’s San Francisco home was attacked twice in forty-eight hours this month. The first attempt, on April 10, involved a Molotov cocktail and led to attempted-murder and arson charges. The second, on April 12, came from a passing vehicle. Different suspects, different methods, same address.
Most coverage is framing this as a story about anti-AI sentiment or political risk. That framing is not wrong, but it is incomplete. The more useful story — for anyone responsible for a principal’s safety — is quieter. The attacks were preceded by months of escalating public visibility, a consistent residence, a recognizable routine, and a broadly known profile. The event drew attention. The exposure came first.
This pattern is not new, and it is not limited to technology CEOs. It is the same pattern we see before most serious physical security incidents involving executives, founders, and high-net-worth individuals. The principal’s profile changes faster than the protective posture around them. By the time that gap is obvious, the decisions are reactive, the timeline is short, and the options are narrower than they should be.
Exposure is usually built slowly
Executive security failures rarely begin as emergencies. They begin as drift.
Visibility rises. The principal takes a board seat, closes a funding round, speaks on a panel, grants a feature interview, or becomes adjacent to a controversy. None of these are problems in themselves. Individually, they are signs of success. Cumulatively, they shift the principal from a private person with a public role into a recognizable public figure.
Posture, meanwhile, does not move. The residence is the same. The commute is the same. The vendors are the same. The assistant still opens calendar invites from unfamiliar senders. Household staff turn over quietly. Contractor access from a renovation two years ago was never fully revoked. A domain registration from 2018 still lists a home address. A property LLC was set up correctly, but the pool service company’s invoice still goes to the principal by name.
None of these are dramatic. Each one, on its own, is ordinary. Together, they form a map.
What actually leaks
The most common assumption we encounter is that entity ownership solves exposure. It does not. It solves one layer. Real exposure leaks through the layers underneath it.
Service accounts. Utilities, deliveries, cleaners, landscapers, pool services, HOA communications, pet sitters. Most of these bill to a name, keep a name on file, or sit in inboxes that are searchable.
Vendors and contractors. Past renovations, installers, alarm technicians, IT consultants, event photographers — all of whom retain some combination of address, access schedule, and photograph.
Public and semi-public records. Permits, voter rolls, campaign contributions, court records, school board sign-ins, boat registrations, real-estate tax appeals. Not uniformly public, but broadly assemblable.
Routine visibility. When the principal arrives at the office, where they eat lunch, which gym they use, which schools the children attend, which flight routes they prefer, which charity events they reliably attend.
Staff and household. Social media posts by nannies, drivers, or housekeepers. Geotags on photos. Mentions in casual interviews. Shift patterns visible to anyone watching.
Online-to-physical crossover. A podcast interview that names a neighborhood. A profile piece that describes a morning run. A real-estate feature photographed from the street. A donor bio on a charity website that lists a town.
Any one of these is low-signal. Together, for a motivated observer, they are enough to reconstruct a principal’s weekly pattern with uncomfortable accuracy.
Why the review comes before the event
A physical security review, done well, is not a hardware audit. It is an assessment of the gap between the principal’s current profile and the current posture around them. It looks at residence and perimeter, office access, travel predictability, event exposure, household and vendor interfaces, and the privacy surface that translates most directly into physical risk.
The point is not to make the principal invisible. That is neither possible nor desirable for someone who needs to lead a company, raise capital, or represent a family office in public. The point is to remove the unnecessary predictability. To close the seams that have opened quietly. To decide, in calm conditions, which exposures are worth accepting and which ones should be reduced.
This work is usually less disruptive than it sounds. Most findings are small adjustments to routines, vendor arrangements, records, and access. A handful are structural. None are permanent fortresses.
When to do this
The clearest moment to conduct a physical security review is before anything visible has happened. Specifically: when the principal’s profile has changed meaningfully in the last twelve months, when the household has added staff or complexity, when public exposure has increased, when litigation or controversy is present or anticipated, or when a comprehensive review has simply never been done. Any of these individually is a reasonable trigger. Several together is a clear one.
The poor time to do this work is after an incident. Not because it cannot be done — it can — but because decisions made under pressure are rarely the decisions a principal would have made with six months of lead time.
A closing note
The two attacks on Altman’s home will not be the last of their kind this year. The conditions that produce them — rising public visibility, political friction, a consistent residence, a recognizable pattern — are widely distributed. Most of the people those conditions apply to do not think of themselves as targets. They do not need to. They only need to recognize that their profile has changed and their posture has not, and to close that gap before someone else notices it first.