Toronto gun-for-hire network linked to US Consulate shooting and dozens of attacks

Toronto police have linked the March 10, 2026 shooting at the United States Consulate to a wider network in which teenagers and young adults were allegedly recruited through encrypted messaging applications to attack selected locations and record the violence as proof for payment.

The Toronto Police Service announced on June 16, 2026, that three people had been arrested in investigations covering the consulate attack, gunfire directed at an apartment and a shooting targeting a business. A fourth suspect, 19-year-old Zara Jabbi, remained wanted in connection with the consulate shooting.

The investigation has expanded beyond three individual crime scenes. Ballistic analysis is examining whether two seized handguns were used in at least 27 shooting incidents across the Greater Toronto Area, including attacks involving synagogues, Jewish schools and other properties.

Toronto Police Chief Myron Demkiw described a recurring criminal model in which organisers use encrypted messaging services to recruit young people, issue target instructions and require video evidence before releasing payment. Investigators are now trying to identify who financed and directed the attacks.

The case has also resulted in the death of Toronto Police Service Constable Marc Pinizzotto. The 43-year-old emergency task force officer was fatally shot on June 11, 2026, while police executed a search warrant connected to the wider firearms investigation.

Nicholas Bennett, 19, was shot by police during that operation and taken to hospital in custody. Toronto Police Service investigators said Nicholas Bennett was expected to face a first-degree murder charge in the death of Constable Marc Pinizzotto, alongside charges connected to other shootings.

No one was injured when multiple rounds struck the United States Consulate in Toronto on March 10. However, the investigation has developed into a larger national security and organised crime inquiry involving the Toronto Police Service, Royal Canadian Mounted Police, Integrated National Security Enforcement Team and United States Federal Bureau of Investigation.

How did the United States Consulate shooting become part of Toronto’s wider gun-for-hire investigation?

The United States Consulate attack occurred at approximately 5:29 a.m. on March 10, 2026, at the diplomatic building on University Avenue in downtown Toronto.

Investigators allege that a stolen white Honda CR-V travelled west on Dundas Street West before turning onto University Avenue and stopping outside the consulate. Two people allegedly exited the vehicle, fired multiple rounds at the building and recorded the attack on their phones before leaving the area.

People were inside the consulate at the time, but no injuries were reported. Gunfire damaged the building’s glass and doors, while officers recovered shell casings and other evidence from the scene. The abandoned vehicle was later located in Scarborough.

Toronto investigators identified the alleged shooters as Sheldon Tracey-Stewart and Zara Jabbi. Sheldon Tracey-Stewart, 18, was arrested on June 11 and charged with offences that include discharging a restricted or prohibited firearm at a place and attacking premises used by internationally protected persons.

Zara Jabbi remained wanted under an arrest warrant. Police treated Zara Jabbi as potentially armed and dangerous and released an image under court authorisation to help locate the suspect.

The United States Consulate investigation was initially treated as a national security matter because the target was a diplomatic facility and because the incident occurred during heightened international tensions. The Counter-Terrorism Security Unit supported the Toronto Police Service investigation, while the Royal Canadian Mounted Police and Integrated National Security Enforcement Team opened a parallel inquiry.

The wider significance emerged when investigators connected the method used at the consulate with other shootings. The attackers allegedly used a stolen vehicle, recorded their actions and targeted a symbolic location without attempting robbery or another conventional street crime.

Those features pointed investigators toward a commissioned-violence model in which local recruits may carry out attacks chosen by organisers who remain geographically distant or hidden behind encrypted communications.

Why are young people allegedly being recruited through encrypted messaging platforms?

The alleged recruitment method reflects a wider shift in organised crime, where intermediaries can locate disposable attackers without maintaining a traditional street gang hierarchy.

Encrypted messaging applications allow organisers to advertise tasks, communicate privately, distribute target locations and transfer instructions across cities or national borders. Recruits may know little about the people funding an attack or the political, criminal or commercial motive behind it.

Toronto police believe young adults are being offered money to discharge firearms at homes, businesses, religious sites and other targets. Recording the attack functions as proof that the assignment was completed and may also create propaganda content intended to frighten a community.

The model gives organisers several layers of separation from the violence. A person commissioning an attack may communicate through an intermediary, who then contacts a recruiter, who ultimately hires a young shooter. Each layer makes it harder for investigators to identify the original decision-maker.

Young people can be attractive recruits because they may have limited criminal records, urgent financial needs or a poor understanding of the consequences. Some may view the assignment as a quick payment rather than as participation in a larger organised crime or national security operation.

The use of local recruits also reduces the need for experienced criminals to travel to a target. A foreign or distant organiser can allegedly direct an attack using people who already live near the location, understand the transport network and can obtain a vehicle or firearm.

The investigation therefore extends beyond the individuals accused of pulling the triggers. Identifying the financiers, coordinators and encrypted accounts behind the instructions will determine whether Toronto is dealing primarily with domestic organised crime, foreign interference, extremist networks or overlapping criminal interests.

How are the consulate, apartment and business shootings allegedly connected?

Toronto police have formally connected three March incidents through investigative evidence, suspect identification and an alleged pattern of coordinated firearm attacks.

The first was the March 10 shooting at the United States Consulate. The second occurred on March 25, when shots were fired at the front door of an occupied apartment in the Markham Road and Eglinton Avenue East area. No one inside was injured.

The third occurred early on March 26 near Islington Avenue and Lake Shore Boulevard West. Gunfire damaged a business storefront, although investigators believe a neighbouring business may have been the intended target.

Police pursued a dark Honda Civic after the March 26 attack. The vehicle crashed into a fence, and two suspects allegedly fled. Toronto investigators later identified the individuals as Jayon Burgher and Nicholas Bennett.

Jayon Burgher, 18, was arrested in April during a separate Halton Regional Police Service investigation involving gunfire directed at an Oakville residence. Toronto police then charged Jayon Burgher in connection with the March 26 business shooting.

Nicholas Bennett was arrested during the June 11 search operations. Investigators expected additional charges relating to the March 25 apartment shooting and the March 26 business attack.

The three Toronto incidents did not produce injuries, but police believe they form part of a common chain of commissioned firearm violence. The targets were different, yet the attacks shared several operational features, including early-morning timing, vehicles used for escape and gunfire directed at fixed properties.

The investigation becomes more complex when attacks against synagogues, Jewish schools and other Greater Toronto Area locations are considered. Police have identified a recurring method but have not publicly stated that every incident was ordered by the same organiser.

The inquiry is therefore examining a network model rather than a single tightly controlled group. Several recruiters, financiers or criminal clients may be using similar methods and sometimes the same guns or shooters.

What do the seized firearms reveal about the scale of violence across Greater Toronto?

Two handguns recovered during police operations have become central to determining the true size of the network.

The Toronto Police Service seized a 9-millimetre handgun and a .45-calibre firearm during the June enforcement activity. Preliminary ballistic links place the 9-millimetre weapon in at least six incidents and the .45-calibre weapon in at least 21 incidents.

Ballistic examination compares markings left on cartridge cases and bullets when a gun is fired. A match can connect crime scenes even when the individuals involved, intended targets and suspected motives appear unrelated.

The possible connection to 27 shootings suggests that firearms were being circulated among several users rather than retained by one individual. Shared weapons can move through criminal networks, allowing different recruits to carry out separate assignments while limiting their personal connection to the firearm.

Investigators are also examining how the guns entered Canada. The seized weapons were reported to have originated in the United States, reinforcing longstanding Canadian concerns about cross-border firearm trafficking.

The firearms evidence may help police reconstruct the network in reverse. Each confirmed ballistic match can identify a location, time, vehicle, suspect group or digital communication that may ultimately reveal who controlled access to the weapons.

The number of linked incidents also shows why the case is not limited to the diplomatic significance of the United States Consulate. The deeper public-safety issue is an alleged service model in which guns, drivers and young recruits can be repeatedly assigned to attack different targets.

Toronto residents may see separate news reports about shots fired at a school, place of worship, business or home. Ballistic findings can reveal that incidents appearing isolated at the time were connected through the same firearm and criminal infrastructure.

How did the investigation lead to the death of Constable Marc Pinizzotto?

The investigation turned fatal on June 11, when Toronto Police Service officers and Royal Canadian Mounted Police personnel executed five search warrants across the city.

Constable Marc Pinizzotto was part of the Emergency Task Force and was involved in a high-risk operation at an apartment building in northwest Toronto. The officer was shot during the execution of a warrant and later died in hospital.

Constable Marc Pinizzotto had served with the Toronto Police Service for 18 years. His death transformed the investigation from a complex series of property shootings into a homicide case involving a police officer killed while searching for suspects and firearms.

Nicholas Bennett was shot when police returned fire and was taken to hospital with life-threatening injuries. Nicholas Bennett remained in police custody and was expected to be charged with first-degree murder.

A handgun was seized during the operation. The incident is subject to separate scrutiny because police discharged firearms, while the wider criminal investigation continues to examine the shootings, weapons and alleged recruitment network.

The death of Constable Marc Pinizzotto illustrates the risk created by gun-for-hire operations even when the original attacks produce no casualties. Firearms kept for repeat assignments remain capable of causing fatal violence during arrests, searches or disputes between network participants.

The case has also placed renewed attention on the dangers faced by tactical officers executing warrants against suspects believed to possess loaded firearms. Intelligence preparation, building layouts and operational planning can reduce risk, but they cannot eliminate it.

For the Toronto Police Service, the investigation now carries both a public-safety objective and an institutional loss. Police must pursue those responsible while supporting the family and colleagues of an officer killed during the operation.

Why could this network become a national security and foreign interference concern?

The Toronto shootings have national security implications because some targets carry diplomatic, religious or political significance.

Gunfire directed at the United States Consulate cannot be treated in the same way as a conventional property dispute. An attack on a diplomatic facility can affect relations between Canada and the United States, require additional security measures and create fear among diplomatic personnel.

Attacks on synagogues and Jewish schools can also produce a wider community impact even when no one is physically injured. Gunfire directed at religious and educational sites can intimidate thousands of people who identify with the targeted institution.

The core unanswered question is who selected and financed the targets. Local recruits may have little personal interest in the victim or institution. The ideological or strategic motive may exist higher in the network.

Canadian agencies must therefore determine whether the organisers are conventional criminal clients, extremist groups, foreign-state proxies or individuals attempting to amplify fear during periods of international conflict.

The involvement of the Royal Canadian Mounted Police, Integrated National Security Enforcement Team and Federal Bureau of Investigation reflects the possibility that communications, financing or firearm supply chains may extend beyond Toronto.

The investigation must still distinguish verified connections from broader suspicions. A similar method does not prove that every shooting was directed by the same organisation, and an international target does not automatically establish foreign-state involvement.

However, the ability to hire young people remotely creates a model that can be exploited by many actors. A foreign network does not need to deploy trained operatives if it can recruit local individuals through encrypted platforms and pay them to record attacks.

That possibility creates a new security challenge for Canada and other democratic countries. The dividing line between organised crime, terrorism and foreign interference can become blurred when the same local gun network serves clients with different motives.

What are the key takeaways from Toronto’s alleged gun-for-hire shooting network?

• Toronto police linked the March 10, 2026 shooting at the United States Consulate to firearm attacks targeting an apartment and a business, while continuing to investigate possible connections to many other Greater Toronto Area shootings.
• Investigators allege that young people were recruited through encrypted messaging applications, given targets and required to record the attacks as proof before receiving payment from unidentified organisers or intermediaries.
• Sheldon Tracey-Stewart was arrested and charged in connection with the United States Consulate attack, while Zara Jabbi remained wanted under an arrest warrant and was considered potentially armed and dangerous.
• Jayon Burgher was charged over a March business shooting, while Nicholas Bennett was expected to face charges linked to two property attacks and first-degree murder in the death of Constable Marc Pinizzotto.
• Two seized handguns may be connected through ballistic evidence to at least 27 shooting incidents, indicating that the same firearms may have circulated through a wider network of recruits and criminal assignments.
• Constable Marc Pinizzotto was fatally shot on June 11 while executing a search warrant connected to the investigation, turning the firearms inquiry into a first-degree murder case involving an officer killed on duty.
• The United States Consulate, synagogues and Jewish schools among the alleged targets have expanded the investigation beyond ordinary organised crime into questions involving national security, community intimidation and possible foreign direction.
• The central unresolved question is who financed and selected the attacks, with Canadian and United States agencies examining whether organisers include domestic criminals, international networks, extremist groups or foreign-linked actors.