Minnesota Homeland Threat Assessment and Urgent Call to Action: Anticipate, Act, Secure – Regardless of Funding or Politics

Issued by Phillip C. Parrish

Candidate for Governor of Minnesota, 2026 | Retired LCDR, U.S. Navy Intelligence Officer

September 25, 2025 – As a retired naval intelligence officer with over two decades of experience in threat forecasting, I am issuing this public threat assessment to highlight clear indicators of escalating risks to Minnesota residents. This is not a partisan critique or election ploy; it is an intelligence-driven warning grounded in open-source data, federal assessments, and historical precedents. Fraud networks under financial pressure, foreign sleeper cells, cyber vulnerabilities, and domestic extremism converge in a volatile mix – amplified by a potential federal shutdown and global distractions. Leadership has defaulted to reactionary postures, but we cannot wait for budgets or ballots. This assessment calls on all willing public safety officials, law enforcement partners, and citizens to initiate immediate, no-cost or low-cost anticipatory measures. Act now: Preparedness is not optional; it is imperative.

Executive Summary

Threat Level: High and Escalating. Indicators point to asymmetric risks from organized crime backlash, terrorist incursions, and hybrid disruptions within Minnesota. Financial chokepoints on fraud-tainted programs (e.g., $250 million Feeding Our Future losses, ongoing $14 million Medicaid scams) are likely to provoke chaos, propaganda, and violence from cornered networks – patterns seen in historical crackdowns. External factors include Al Qaeda/ISIS affiliates on U.S. soil (11,000+ potential entrants via borders) and cyber intrusions from state actors like Iran and China. Domestic extremism remains a top FBI concern, with soft targets like schools and hospitals at risk.

Key Risks:

Likelihood of Escalation: High, within 6-12 months post-scrutiny, based on precedents.

Impact: Severe, targeting urban/rural populations, infrastructure, and public trust.

Mitigation Gap: Current responses are post-incident; anticipatory actions are minimal.

Regardless of federal funding disruptions (shutdown odds near-certain by September 30), immediate steps – intelligence sharing, community vigilance, and drills – can be implemented at no extra cost. This assessment substantiates these threats and mandates action from those ready to lead, irrespective of political cycles.

Threat Indicators: Collated and Cross-Referenced

Drawing from DHS/FBI bulletins, open-source reporting, and my intelligence expertise, the following indicators signal impending escalation:

1. Fraud-Driven Backlash from Organized Networks:

• Minnesota’s programs are under siege: The Housing Stabilization Program ($107 million) was paused in August 2025 amid federal wire fraud charges against eight defendants; a September 24 indictment exposed a $14 million Medicaid autism scam; and 62 child care fraud probes continue. These follow the 2022 Feeding Our Future theft of $250 million via sham nonprofits.

• Historical Tight Example: In Mexico, the 2010-2012 Mérida Initiative’s financial interdictions on cartels led to a 300% spike in assassinations of officials and propaganda campaigns via social media to discredit enforcers – a direct response to revenue loss. Similarly, U.S. MS-13 gangs escalated targeted killings in 2018-2019 after deportation crackdowns severed funding streams, per FBI reports.

• Projection: Squeezed Minnesota networks may incite violence against auditors or public figures, using propaganda to label probes as “biased.”

2. Terrorist Sleeper Cells and Border Incursions:

• DHS 2025 assessments confirm Al Qaeda resurgence, with Iranian-linked cells (up to 11,000 affiliates) entering via southern borders, targeting mid-tier cities and hospitals as “test runs.” FBI tracks ISIS in border-adjacent areas for 3+ years; 3,000+ Chinese military-aged apprehensions signal potential sabotage.

• Historical Tight Example: Post-9/11, Al Qaeda sleeper cells in the U.S. (e.g., the 2002 Lackawanna Six) activated after overseas pressures, plotting attacks on soft targets – a pattern repeating with current border vulnerabilities.

• Projection: Plausible locations overlay: Twin Cities, rural Midwest, and trauma centers; multi-city attacks mimicking 9/11 calls on X.

3. Cyber-Hybrid and Domestic Extremism Threats:

• Chinese APT compromises and Iranian intrusions (June 2025 NTAS bulletin) could disrupt responses; ransomware like Obscura (September 19) targets critical sectors.

• Domestic: White supremacists as top insider threat; August 27 Annunciation School shooting (2 dead, 17 injured) highlights soft-target risks.

• Historical Tight Example: The 1980s RICO crackdowns on La Cosa Nostra provoked bombings and witness intimidations to derail investigations – mirroring potential U.S. domestic responses today.

• Projection: Hybrid ops amplifying physical chaos, especially amid global distractions like Russian Zapad-2025 exercises and Polish drone incursions.

4. Amplifying Factors:

• Imminent shutdown (September 30) furloughs investigators, creating exploitation windows – but actions need not wait for funding.

• Hegseth’s Quantico summit signals broader military readiness, potentially diverting resources from homeland.

Assessment of Current Leadership Response: Reactionary and Inadequate

Responses remain event-driven, not predictive – a fatal flaw in intelligence terms:

• Governor Walz’s September 17 executive order (firing a DHS official, proposing AI tools) came after years of ignored warnings, per Minnesota Reformer probes. DHS cut threat funding to Public Safety in July, leaving gaps.

• School pleas for security (April 2023) went unheeded until post-shooting; extra police withdrawn after one day.

• Legacy media distracts with non-threat stories; public preparedness (e.g., HSEM drills) focuses on weather, not multi-domain risks.

• Overall: Per WEF 2025 governance reports, reactive cultures amplify crises; Minnesota exemplifies this with delayed audits and post-hoc budgets.

This inertia risks cascading failures, but proactive individuals can bridge the gap without waiting for top-down approval.

Recommended Immediate Actions: Act Now, Regardless of Funding or Politics

This is a direct call to willing officials, officers, and citizens: Implement these no/low-cost measures immediately. Do not defer to budgets or elections – threats respect neither.

1. For Public Safety Officials and Law Enforcement (BCA, Sheriffs, FBI JTTFs):

• Establish ad-hoc fusion cells: Share fraud/terrorism intel via existing channels; map sleeper risks in Twin Cities/rural areas – start with daily briefings.

• Conduct tabletop exercises: Simulate hybrid attacks on hospitals/schools; use free NIMS templates, no funding needed.

• Harden soft targets: Patrol rotations at trauma centers; train staff on suspicious indicators via internal memos.

• Predictive monitoring: Scan X/social media for radicalization spikes; collaborate with federal partners for watchlists.

2. For Citizens and Communities:

• Report anomalies: Uniform purchases, hospital scouting to 1-800-CALL-FBI or local tips lines.

• Prepare personally: Assemble 72-hour kits; form neighborhood watch groups focused on threat indicators.

• Amplify awareness: Share this assessment; demand transparency from leaders.

3. Broader Mandates:

• Integrate cyber alerts into patrols: Monitor for disruptions via free CISA tools.

• War-game escalations: Use UVA/P1 frameworks for foresight drills – accessible online.

These actions draw from proven intelligence doctrines: Anticipation disrupts threats. Those willing – step forward. Minnesota’s security depends on it.

For collaboration and my personal support please contact me directly. We all must lead today, or lament tomorrow.

Phillip C. Parrish: 21 years in threat assessment, committed to action-oriented leadership.

###