On June 16, Toronto police said hired shooters, encrypted messages and two circulating guns connect 27 attacks across the GTA. The shooters are becoming visible. The clients who bought the violence remain hidden.


Toronto Police Service’s June 16 announcement changes the story of the March shootings at the United States Consulate, synagogues and Jewish schools.

Police say teenagers and young adults were recruited through encrypted messaging applications to carry out shootings for money. The attackers were reportedly required to film the violence as proof that the assignment had been completed. Two recovered handguns have been connected through ballistics testing to 27 firearm discharges across the Greater Toronto Area.

The targets were not confined to one political or religious category. They allegedly included the U.S. Consulate, synagogues, Jewish schools and locations connected to disputes in the towing and waste-management industries.

Police call it a “criminals for hire” model. The evidence explains how the attacks were carried out. It does not identify the people who ordered them.

That distinction matters because politicians assigned a political motive months before police identified the criminal market behind the shootings.

When gunfire struck the U.S. Consulate on March 10, Ontario Premier Doug Ford warned about “sleeper cells.” Federal officials treated the shooting as a national-security incident. Three recent shootings at Toronto-area synagogues were pulled into the same atmosphere of fear. Days later, Ford used those still-unresolved attacks to support an unsuccessful attempt to prohibit Toronto’s annual Al-Quds Day rally.

Police had not identified the shooters. They had not established a motive. They had not demonstrated any connection between the attacks and Palestinian solidarity organizers. Ford did not need evidence for the association he wanted to create. The identity of the targets was enough to cast a Palestinian protest as the threat.

The June 16 disclosure cuts directly against that political attribution. It reveals an outsourced market for violence while leaving the identities and motives of the clients unresolved.

The violence was outsourced

The structure described by police does not resemble a conventional organization in which every participant shares an ideology, chain of command or long-term membership. It resembles a market.

A client selects a target. An intermediary communicates through an encrypted application. A young shooter receives the assignment. A firearm circulates between participants. The shooter records the attack and submits the footage to receive payment.

Violence becomes an on-demand service. The person ordering it is separated from the person performing it by brokers, digital platforms and disposable labour.

The requirement to film the shooting exposes the economic structure. The video is not incidental documentation. It is the deliverable. It proves completion, authorizes payment and allows the organizer to remain physically removed from the crime.

This structure also explains how incidents with different targets and motives can follow the same pattern. A synagogue shooting, an attack connected to a towing dispute and gunfire directed at a diplomatic building can move through the same criminal infrastructure while serving different clients.

Shared guns do not prove shared ideology. Similar methods do not prove a single mastermind. They show that access to violence has been organized and sold.

What the new evidence reveals

In March, Spark Solidarity examined the unresolved consulate and synagogue shootings through the logic of Canada’s security state.

That article identified a real political pattern: overnight attacks, no injuries, extensive surveillance, few public investigative results and immediate exploitation by officials. It asked why agencies capable of coordinating mass surveillance and elaborate undercover operations had apparently failed to identify people firing repeatedly at heavily monitored institutions.

The June announcement reveals the operational layer that was concealed in March. Police recovered weapons, established ballistic links and identified alleged shooters inside a repeatable gun-for-hire system. That evidence does not negate the earlier analysis. It shows how selective resolution can expose the disposable delivery layer while leaving the commissioning interests untouched.

The June arrests do not overturn that analysis. They clarify how the process works. Police identified the young people allegedly firing the guns and traced the weapons circulating between attacks, but the commissioning layer remains concealed. The unresolved shootings had already served their political function before the first arrests were announced: officials used them to expand the atmosphere of threat, target Palestinian organizing and strengthen the authority of the security apparatus.

The security state does not need to leave every crime permanently unsolved. It needs to control the pace and limits of resolution. Disposable shooters can be arrested after the political value of uncertainty has been extracted, while the people who financed, directed and benefited from the violence remain outside public view.

Police have moved from the crime scenes toward the shooters. They have not publicly reached the commissioning layer. Toronto Police Chief Myron Demkiw said investigators, working with the RCMP and FBI, are still trying to determine who paid for the attacks.

The question is no longer why police could not find the people firing the guns. It is who hired them, which intermediaries connected them and whether the clients behind different attacks had any relationship to one another.

Ford invented the political connection

After gunfire struck three Toronto-area synagogues, Ford sought an emergency injunction against the March 14 Al-Quds Day rally. He called the event a breeding ground for hate and antisemitism and presented its prohibition as a public-safety measure.

The province produced no evidence connecting the synagogue shootings to the rally, its organizers or the Palestinian solidarity movement. It did not establish that previous Toronto Al-Quds Day events had generated criminal charges. It did not show that police believed an injunction was necessary.

A Superior Court judge rejected Ford’s application. The rally proceeded and drew thousands of people. The arrests reported that day involved counter-protesters.

The gun-for-hire investigation has produced no public evidence connecting the synagogue attacks to Al-Quds Day. It instead points to a transactional system in which paid shooters were deployed against targets selected by clients whose identities and motives remain unknown.

Ford moved from the identity of the targets to an implied identity for the perpetrators. Jewish institutions had been attacked, so a Palestinian solidarity rally was cast as the danger.

That was not an investigative conclusion. It was political opportunism.

Unattributed violence was used against a movement with no demonstrated relationship to the crimes. The court rejected the legal argument, but the propaganda had already done its work: Palestinian protest, antisemitism and physical violence were placed inside the same frame before police knew who had fired the guns or who had paid them.

Ballistics establish a market, not a mastermind

Toronto police say one recovered handgun was connected to six shootings and another to 21. That is substantial forensic evidence that the weapons circulated through a wider criminal system. It is not proof that all 27 attacks were ordered by one organization.

A reusable gun can connect otherwise separate disputes. An intermediary can service multiple clients. A shooter can perform assignments without knowing who ultimately commissioned them. A platform can produce recurring methods without producing a unified political project.

The word “network” can obscure this distinction. It may describe a stable hierarchy. It can also describe a shifting collection of brokers, shooters, weapons and clients assembled around individual jobs.

Determining which structure existed in Toronto requires evidence about payments, communications and command. Ballistics can show where a gun was used. They cannot reveal why a target was selected or who made the decision.

This matters when religious and diplomatic targets are involved. A shooting at a synagogue is immediately classified as antisemitic violence. An attack on the U.S. Consulate is immediately framed as terrorism or geopolitics. Those descriptions may eventually match the motives of particular clients. They cannot be established from the target alone.

The clients are the story

The police announcement answers the mechanical question surrounding the March attacks. Young shooters could be recruited remotely, supplied with circulating firearms and paid after recording the result.

It also identifies the investigation that now matters most.

Who selected the synagogues and Jewish schools? Who ordered the consulate attack? Were those clients connected? Did intermediaries know the commissioners’ identities? How were payments made? Were the same brokers arranging attacks arising from commercial disputes? Did any client select politically sensitive targets because the resulting fear would exceed the physical damage?

Repeating the names Telegram, Signal and WhatsApp does not answer those questions. The applications are communication tools. They do not explain the interests directing the violence.

The position of the alleged shooters also exposes the class structure of the operation. Teenagers absorb the physical and legal risks while organizers remain distant. The least powerful participant becomes the most visible defendant. The people buying the violence stay insulated behind money, technology and intermediaries.

The arrests matter. The recovered firearms matter. The ballistic evidence materially changes what was known in March. But identifying the delivery system is not the same as identifying the authors of the violence.

Toronto now knows more about the hands holding the guns. The people whose interests those hands served remain concealed—and until they are identified, the political stories attached to these attacks remain what they were from the beginning: claims imposed before the evidence.


Sources
  1. Toronto Police Service — Criminals for Hire Linked to 27 Firearm Discharges; June 16, 2026 announcement covering the arrests, two recovered handguns, ballistic links to 27 shootings, the alleged paid-shooter model and the continuing investigation into who directed and financed the attacks.
  2. Global News — Al-Quds Day protest proceeds after court rejects Ford’s injunction bid; March 14, 2026 ruling, Ford’s response, the Canadian Civil Liberties Association’s warning and the court’s finding that Ontario had not met the legal test for an injunction.
  3. CBC News — Al-Quds Day rally proceeds after Ford injunction rejected; March 14, 2026 reporting on the province’s evidentiary case, the court decision and the rally proceeding.
  4. CP24 — Toronto Al-Quds rally underway after judge dismisses Ontario government’s injunction bid; March 14, 2026 coverage of Ford’s injunction attempt, the decision and the demonstration.