Incident Report // Comprehensive Forensic Dossier

The San Bernardino Terrorist Attack

An analytical reconstruction of the 2015 Inland Regional Center mass shooting, the tactical analysis of home-grown violent extremism, and the forensic ballistics tracing that catalyzed a national encryption privacy debate.

The assault was executed by Syed Rizwan Farook, an American-born citizen of Pakistani descent working as a San Bernardino County Department of Public Health environmental inspector, and his wife, Tashfeen Malik, a Pakistani national who immigrated to the United States on a K-1 fiancé visa. Forensic digital audits conducted by the FBI revealed that both subjects had undergone an extensive, privatized radicalization path years prior to their marriage, consuming extremist propaganda online and discussing martyrdom concepts in encrypted communication channels.

Operating as an isolated, home-grown cell, the couple did not receive explicit logistical instructions or operational funding from foreign terror organizations. Instead, they acted as independent radical actors inspired by decentralized web doctrine. Over several months, they turned their townhouse in Redlands, California, into a clandestine tactical depot, stockpiling thousands of rounds of rifle ammunition, tactical vests, and raw materials required to construct multiple pipe bomb matrices.

Farook purposefully targeted a mandatory holiday training luncheon hosted by his own agency inside the non-profit Inland Regional Center complex. Because he was an established employee, his presence on the morning of December 2 generated zero suspicion among the roughly 80 colleagues gathered inside Conference Room 1, enabling the cell to precisely exploit an unprotected soft target environment.

**10:30 AM // Workplace Exit and Mobilization:** Farook arrived at the department gathering and seated himself among coworkers. Following a brief period, he abruptly exited the conference center, leaving a stylized duffel bag on a side table. The bag contained a complex three-segment pipe bomb rig rigged to an un-triggered remote receiver. Farook drove back to his Redlands base, where Malik was waiting. The couple donned full tactical loadouts, including black masks, load-bearing gear, and multi-magazine chest rigs.

**10:59 AM // Conference Room Room 1 Breach:** Driving a rented black Ford Expedition, the pair returned to the Inland Regional Center. They breached the side doors of the conference hall armed with two 5.56mm semi-automatic rifles (a DPMS Panther Arms and a Smith & Wesson M&P15) alongside two 9mm handguns. They immediately deployed high-volume automatic-pacing fire into the dense group of county employees, continuing to shoot wounded individuals on the floor as panic erupted.

**11:04 AM // Rapid Egress Phase:** The shooters fired more than 100 rifle rounds in under four minutes, transforming the room into a high-casualty zone. They immediately evacuated the building before local patrol details could pin them down, melting into the regional traffic grid. Responding tactical units flooded the bloodied hall, establishing an emergency triage zone and locating the unexploded pipe bomb duffel bag, which was later neutralized by bomb squads.

**15:08 PM // The Urban Pursuit and Shootout:** Following a tip identifying Farook’s behavior prior to leaving the lunch, surveillance details intercepted the suspects’ black Ford Expedition near their Redlands property. A high-speed pursuit tore through suburban thoroughfares, terminating on San Bernardino Avenue as the suspects opened fire through their rear windows. Over 20 responding law enforcement officers established a defensive line, pinning the vehicle down.

**15:15 PM // Threat Termination Matrix:** The shooters engaged in an intense gun battle, firing roughly 80 rounds at police teams. Law enforcement answered with a high-volume barrage of over 440 rounds. Both Farook and Malik were struck multiple times by high-velocity service rounds and terminated on-scene on the asphalt, bringing the immediate tactical operation to a close.

The post-incident analysis exposed severe casualties: 14 civilians were killed outright or succumbed to massive arterial injuries within hours, while 22 others sustained severe ballistic wounds. The forensic investigation quickly shifted to tracking how the cell acquired its weaponry. Investigators found that the two AR-15 style rifles had been purchased legally by a neighbor, Enrique Marquez Jr., who was subsequently indicted on federal charges for acting as a straw buyer and providing material support to terrorists.

In the digital investigation phase, the case sparked an unprecedented corporate legal showdown between the FBI and Apple Inc. Federal agents recovered Farook’s county-issued iPhone 5C, but were locked out by the device’s native iOS encryption systems. When the Department of Justice obtained a federal court order demanding Apple write custom software (“GovtOS”) to bypass the phone’s security mechanisms, Apple refused, claiming the request would establish a dangerous backdoor that threatened consumer privacy worldwide. The legal standoff ended abruptly in March 2016 when the FBI successfully bypassed the security lock independently using a third-party cyber-forensics contractor, cementing the case as a watershed moment in modern digital privacy law.

The historical verified registry of the 14 innocent lives taken during the Inland Regional Center assault on December 2, 2015: