As the holiday season approaches, the security environment always grows more vulnerable to threat activity. Large gatherings, predictable public events, and symbolic religious observances provide both opportunity and ideological motivation for violent actors—from terrorists to organized criminal networks. Adding to this challenge is the presence of unvetted individuals who have entered the United States through the southern border in recent years, some with confirmed or suspected links to terrorist groups. This has heightened concern among law enforcement agencies about the potential for unknown actors to exploit the holiday period for symbolic or operational impact.
The stretch from late November through early January has consistently seen increased extremist chatter, online radicalization, and mobilization attempts across Western nations. History shows the pattern clearly. In 2010, an FBI sting stopped a plot to bomb Portland’s Christmas tree lighting. In 2015, a radicalized couple carried out the San Bernardino holiday party attack, killing fourteen. Europe has faced the same pattern: Berlin’s 2016 Christmas market truck attack and the 2018 Strasbourg market shooting both exploited public gatherings during the holidays. Even recently, such as the 2022 New Year’s Eve machete attack in New York, lone actors continue to target crowds inspired by extremist propaganda.
While agencies elevate their alert postures, the most immediate layer of defense still comes from the public. Vigilance continues to save lives. A street vendor’s quick call in 2010 exposed a car bomb in Times Square. A commuter’s report helped reduce casualties in London’s Parsons Green bombing attempt in 2017, and an online tip that same year prevented a planned Los Angeles subway attack. The 2018 Austin package bombings were solved because of repeated citizen reports, and a 2022 tip in Vienna stopped a planned Christmas market attack. The lesson is consistent: everyday people often provide the first—and best—line of warning.
Key behavioral indicators include someone showing unusual anxiety, conducting surveillance, leaving unattended bags or vehicles, or taking an unusual interest in security procedures. Online or workplace warning signs can include sudden extremist rhetoric, glorification of attacks, or attempts to share or obtain weapons-related material. The threshold for reporting should be low—if something feels off, it’s worth saying something. Suspicious activity is defined by behavior, not background, and timely reporting allows professionals to intervene before harm occurs.
Reporting should be simple and direct: call 911 for immediate threats, contact local police for non-emergencies, or alert on-site security at events or transportation hubs. Provide clear details—what you saw, where, and when. Perfection isn’t the goal; speed is. Analysts find that hesitation, not overreporting, is what most often costs lives.
The holidays should be about connection, not crisis. Staying alert without fear and ready without panic is the balance. Awareness is what transforms vulnerability into preparedness. When people see something and say something, they turn potential tragedy into prevention—and that vigilance is what keeps the holiday season safe.