Words written on ammunition. A smiling surveillance photo. A discarded water bottle. A burner cell phone.
These are among the key pieces of evidence providing clues for police more than 24 hours into a hunt for the man who gunned down a healthcare executive Wednesday before seemingly disappearing into the city.
UnitedHealthcare CEO Brian Thompson was killed on a busy Midtown Manhattan street in a targeted early morning attack.
Video from a nearby Starbucks shows the assailant buying a bottle of water and two energy bars roughly 30 minutes before the shooting, a senior police official said.
Investigators are developing clues from a burner phone and water bottle believed to have been dropped by the suspect when he fled the shooting scene.
A fingerprint was lifted from the water bottle, a law enforcement official tells CNN. The print, however, is smudged making it less conclusive, the official said.
The phone could yield fingerprints, DNA and –– if police technicians can unlock the phone –– other clues to the suspect’s identity, investigators said. Even a disposable burner phone might yield clues about communications and searches before the shooting. As of Thursday afternoon, police are still trying to access that phone, a law enforcement official said.
Authorities have been searching the area but have not found the gunman’s bike or weapon. A shell casing recovered from one of the bullets fired at Thompson had the word “depose” written on it, while “delay” was written on a live round that was ejected when the shooter appeared to be clearing a jam.
Police are exploring whether the words found indicate a motive, pointing to a popular phrase in the insurance industry: “delay, deny, defend.”
They’re also examining the suspect’s travels, including a bus trip to New York before the shooting and a stay at a hostel, law enforcement sources say.
A key moment of flirting between a person of interest in the case and a female hostel employee has yielded what experts say could be the most significant clue in authorities’ attempts to track him down: a maskless photo released by police Thursday.
Surveillance video trail
Investigators who are also piecing together a timeline of the shooter’s movements told CNN that after the shooting, the assailant crossed the street, fled through an alleyway, and got on an electric bike on 55th Street before heading north on 6th Avenue toward Central Park, where he was last seen at 6:48 a.m.
Surveillance video appears to show the suspect leaving the 57th Street F train station before the shooting. CNN has confirmed the timestamp at 6:15 a.m.
An extensive video canvass led police to the area of a hostel on New York’s Upper West Side, a police official told CNN.
The suspected gunman used a fake New Jersey driver’s license when checking into the hostel, according to a law enforcement official. The identification was used to check in on November 30, multiple law enforcement officials told CNN.
One man appeared to wear a mask most of the time that he was staying at the hostel, multiple law enforcement sources told CNN. Hostel employees remember a man who wore a hooded jacket identical to the shooter’s, and who almost never lowered his mask or the hood.
The NYPD on Thursday released photos of a smiling man standing at the front desk of the hostel who police say is “wanted for questioning.” It’s unclear when the photos were taken.
Police are calling this man a person of interest until they can identify him and confirm or eliminate him as a possible suspect.
A female hostel employee told authorities that at one point, she asked a then-masked man to lower his mask while flirting with him, which is when the photos released by authorities on Thursday were captured, a law enforcement official told CNN.
Officials are also looking into whether the getaway bike was prepositioned, because they think the suspect may have taken the subway from the Upper West Side to Midtown, according to law enforcement officials briefed on the investigation.
Investigators also have video of the suspect on the Upper West Side, carrying what appears to be an electric bicycle battery, the sources said.
Police believe that the shooter is a “light-skinned male” who was last seen wearing “a light brown or cream-colored jacket, a black face mask, black and white sneakers and a very distinctive gray backpack.”
Police deployed mobile field forces to conduct a grid search, looking through garbage cans, dumpsters and bushes in an extensive search for the missing backpack, a senior law enforcement official told CNN.
Police initiated the search after detectives reviewed security footage of the man they believe is the suspect no longer wearing the backpack after leaving the park through the West 77th street exit.
Investigators have not located the backpack, according to the official.
Authorities are offering up to $10,000 for information leading to the arrest and conviction of the suspect.
View this interactive content on CNN.comWhat video of the incident shows
The masked gunman was “lying in wait” for Thompson outside the Hilton Midtown shortly before 7 a.m. Wednesday, according to New York Police Commissioner Jessica Tisch, as Thompson made his way to the hotel to attend his company’s annual investor conference.
When Thompson approached the building, a dark-hooded figure with a gray backpack appeared several feet behind the executive and shot him in the back, surveillance video obtained by CNN shows.
Thompson then stumbled forward before turning to face the assailant and falling to the ground. The gunman calmly walked toward the CEO and continued to shoot –– appearing to clear a jam with the firearm momentarily before shooting again, video shows.
Thompson was pronounced dead less than half an hour after the incident.
Suspect traveled to New York City via bus, police say
The suspect had traveled to New York via Greyhound bus before the shooting, multiple law enforcement sources told CNN.
That bus started its route in Atlanta, the sources said. Authorities do not know whether the suspect boarded in Atlanta or elsewhere, the sources said.
One law enforcement official told CNN that police believe the suspect arrived in New York City on November 24 – 10 days before the shooting. The suspect was seen on surveillance video getting off the bus around 9 p.m. that day and walking through the Port Authority bus terminal in Manhattan, according to a law enforcement source briefed on the investigation.
He then went to a hostel, and afterward appeared to have moved around the city, the source said.
The suspect checked out of the hostel on November 29, the law enforcement official said. He checked back into the hostel on November 30, multiple law enforcement sources previously told CNN.
Shooter appears to be an experienced marksman who used a silencer, experts say
While a weapon has not yet been identified, detectives believe the suspect operated slowly, deliberately, and in a way that suggested he was experienced marksman, according to police officials speaking to CNN on the condition of anonymity because of the ongoing investigation.
Firearm experts who have studied the video say that though it appears the gun malfunctioned with each shot, the assailant reacted and cleared the jam in the weapon with confidence –– as if the suspect were someone with firearms training from law enforcement or the military.
“It does seem that he’s proficient in the use of firearms as he was able to clear the malfunctions pretty quickly,” NYPD Chief of Detectives Joe Kenny said at a news conference Wednesday.
The gun also appeared to be fitted with a silencer, which can cause weapons to malfunction and jam unless they are installed with specific modifications, according to a law enforcement official and firearm experts.
“Jamming” refers to the gun not loading another bullet into the chamber after its fired. The gunman was seen racking the slide back to clear the “jam” and load another round.
The shooting was a “brazen, targeted attack,” said NYPD commissioner Tisch, describing the gunman to have waited for several minutes, stepping onto the sidewalk from behind a car and aiming at Thompson despite being in full view of other people and cars that passed by.
“We will not rest until we identify and apprehend the shooter in this case,” Tisch said.
CEO received threats, wife says
While police haven’t announced a motive in Thompson’s shooting, a source with knowledge of the investigation told CNN that UnitedHealthcare’s parent company UnitedHealth Group – America’s largest insurance company – was aware of concerning threats against its high-level executives.
Thompson’s name was not specifically mentioned, but the threats did talk about going after high-level executives at the company, the source said.
In an interview with NBC, Thompson’s widow, Paulette told the network that “there had been some threats” against her husband.
“Basically, I don’t know, a lack of coverage? I don’t know details,” she said. “I just know that he said there were some people that had been threatening him.”
Paulette Thompson declined to comment to CNN on the threats she described to NBC.
UnitedHealth Group leadership is supported by an in-house security team, including at the New York conference, a source familiar with the company’s security said. Thompson’s security detail was not with him when the shooting happened.
Company ‘shocked’ by loss
Thompson’s widow said that their family is “shattered” by the “senseless killing of our beloved Brian.”
“Brian was an incredibly loving, generous, talented man who truly lived life to the fullest and touched so many lives,” Paulette Thompson told CNN Wednesday. “Most importantly, Brian was an incredibly loving father to our two sons and will be greatly missed.”
Thompson, who lived in Minnesota, was appointed chief executive of UnitedHealthcare in 2021 and had been at the company since 2004. Prior to being named chief executive of UnitedHealthcare, Thompson worked as CEO of the company’s government programs business, which includes its Medicare and retirement businesses.
The 50-year-old graduated from the University of Iowa in 1997 with a bachelor’s degree in business administration with a major in accounting. He graduated as valedictorian, according to his LinkedIn. He was a Collegiate Scholar, Carver Scholar, State of Iowa Scholar and Faculty Scholar. Thompson graduated from South Hamilton High School in Jewell, Iowa, in 1993.
“We are deeply saddened and shocked at the passing of our dear friend and colleague Brian Thompson, the CEO of UnitedHealthcare,” a public statement from the company said.
“Brian was a highly respected colleague and friend to all who worked with him. We are working closely with the New York Police Department and ask for your patience and understanding during this difficult time. Our hearts go out to Brian’s family and all who were close to him.”
Thompson in May was sued for alleged fraud and illegal insider trading. The Hollywood Firefighters’ Pension Fund filed a lawsuit against UnitedHealth Group, CEO Andrew Witty, Executive Chairman Stephen Hemsley and Thompson, alleging the executives schemed to inflate the company’s stock by failing to disclose a US Justice Department antitrust investigation into the company.
The Southern District of New York declined to comment. UnitedHealthcare did not respond to a request for comment on the lawsuit.
CNN’s David Goldman, John Towfighi, Amanda Musa, Rebekah Riess, Meg Tirrell, Kara Scannell, Taylor Galgano, Steve Almasy and Ashley R. Williams contributed to this report.