🚔
Exercise #021 · Active Threat · Multi-Jurisdictional · Targeted LE · Officer Safety
The Christopher Dorner Manhunt — Southern California & Big Bear Lake
February 3–12, 2013 · Four counties · 4 killed · 3 wounded · 9-day manhunt
Active Threat Officer Killed Multi-Jurisdictional Civilian Shot by LE Targeted LE Threat Self-Deployment 🎖 Anniversary
Key Facts
Incident Period
Feb. 3–12, 2013
Jurisdictions
4 counties (Orange, LA, Riverside, San Bernardino)
Officers Killed
2 (Crain, MacKay)
Total Killed
4
Civilians Shot by LE
2 (Torrance — unrelated)
Shots at Wrong Truck
107 rounds
LE Protection Details
40+ named targets
Resolved
Feb. 12, 2013 — Big Bear
⏱ Incident Timeline
Feb. 3, 2013
Monica Quan and Keith Lawrence shot and killed in Irvine. Quan was the daughter of retired LAPD Captain Randal Quan, who had represented Dorner at his dismissal hearing. Dorner's manifesto, already distributed, had named Quan by name. The manhunt begins.
Feb. 6–7
Dorner attacks law enforcement officers in Corona and Riverside. Opens fire on two LAPD officers in Corona — one grazed, one injured by shattered glass. Minutes later, ambushes two Riverside Police Department officers, killing Officer Michael Crain and wounding his partner. GAP
Feb. 7, ~5:30 AM
LAPD officers on a protection detail in Torrance fire 107 rounds at a blue Toyota Tacoma. Occupants: Margie Carranza (47) and her mother Emma Hernandez (71), delivering newspapers. Officers believed the vehicle matched Dorner's truck. Hernandez shot twice in the back. Carranza wounded by glass. Civilian Shot
Feb. 7, ~5:45 AM
Torrance PD officers ram and fire on a second unrelated vehicle. Driver David Perdue, en route to surf, is rammed and shot at — not hit. His black Honda Ridgeline does not match Dorner's vehicle. Two separate civilian shooting incidents within 25 minutes. GAP
Feb. 7
Dorner's burning Nissan Titan found off a forestry road near Big Bear Lake — broken axle, rifles and camping gear inside. An army of law enforcement arrives in the mountains. Command post established at Bear Mountain ski resort. Nine days of mountain searches begin. DISPATCH
Feb. 7–11
Dorner is holed up in a vacation condo 200 yards from the law enforcement command post, watching search operations daily. Thousands of tips, door-to-door searches, thermal helicopter sweeps. No contact. Dorner evades the entire search.
Feb. 12, 12:23 PM
Karen Reynolds calls 911 from Mountain Vista Resort — she and her husband have been tied up by Dorner, who has been hiding in their condo for days. Dorner steals their vehicle. Southern California law enforcement mobilizes. DISPATCH
Feb. 12, ~1:00–3:00 PM
Dorner engages San Bernardino County Sheriff's deputies. Opens fire on two deputies — Detective Jeremiah MacKay killed, a second deputy wounded. Barricades in a cabin in Angelus Oaks. Deputies surround it. Tear gas deployed. Demolition vehicle used to collapse walls. Pyrotechnic canisters fired — cabin ignites. GAP
Feb. 12, evening
Remains confirmed in burned cabin. Single gunshot wound to the head — self-inflicted. Dorner's identity confirmed by dental records February 14. San Bernardino County Sheriff's Department confirms: the nine-day manhunt is over.

By the time the first 911 call came in from Irvine on February 3, 2013, law enforcement already had the manifesto. Christopher Dorner — former LAPD officer, former Naval Reserve lieutenant — had distributed an 11,000-word document naming more than forty law enforcement personnel he intended to kill, describing his tactical training, and declaring unconventional warfare on the LAPD and its families. This was not a suspect with unknown intentions. This was a suspect who had announced what he was going to do, named the people he was going to do it to, and then started doing it.

That is the specific problem the Dorner manhunt poses for dispatch: what does it mean to operate inside a threat that understands your radio traffic, knows your protocols, is himself a trained dispatcher, and has pre-identified targets among the personnel you're protecting and dispatching? The ordinary information asymmetry between law enforcement and a suspect had been inverted. Dorner knew more about how law enforcement would respond than most suspects do, because he had been law enforcement.

"Officers were dispatched to unfamiliar territory with limited planning or tactical instruction and limited resources." — L.A. County District Attorney's memorandum on the Torrance civilian shooting, 2016

The civilian shootings in Torrance on February 7 — two separate incidents within 25 minutes — are where the dispatch dimension of this exercise concentrates. Eight LAPD officers fired 107 rounds into a blue Toyota Tacoma driven by two women delivering newspapers, wounding both. Twenty-five minutes later, Torrance PD officers rammed a black Honda Ridgeline and fired on the driver, a man going surfing. Neither vehicle matched Dorner's. Neither occupant resembled him. The officers had been deployed to an unfamiliar neighborhood with limited briefing, limited equipment, and a level of fear the District Attorney's memo described as justified given the threat level — but the outcome was two innocent civilians shot and a third traumatized by a vehicle ramming.

While law enforcement conducted an exhaustive search of the Big Bear area — door-to-door checks, helicopter thermal sweeps, thousands of tips — Dorner was watching from approximately 200 yards away, hiding in a vacation condo that sat directly across from the command post. He remained there for five days. The intelligence picture that dispatch and field operations were working from was fundamentally wrong throughout the search, and no one knew it.

On February 12, the manhunt ended the way it had threatened to from the first day. Dorner emerged from his hiding place, tied up the property owners who discovered him, and was eventually cornered in a cabin near Angelus Oaks. In the final standoff, San Bernardino County Sheriff's Detective Jeremiah MacKay was killed and another deputy wounded. The cabin caught fire. Dorner died inside from a self-inflicted gunshot wound. The nine-day manhunt that had spread from Orange County to the San Bernardino Mountains — and had resulted in a law enforcement agency shooting its own public — was over.

Discussion Questions — 4 Groups
🎯 Dispatching Into a Threat That Knows Your Playbook
1
Christopher Dorner was a trained LAPD officer and dispatcher. He knew radio protocol, tactical response patterns, and how 911 centers coordinate. His manifesto explicitly named targets in advance. This is a fundamentally different kind of threat than an unknown suspect. What does it mean for dispatch when the threat has insider knowledge of law enforcement operations — and what adaptations, if any, are appropriate when the suspect knows how you'll respond before you respond?

Most dispatch training is built around an information asymmetry: law enforcement has information the suspect doesn't. Dorner had partially inverted that asymmetry. He knew how LAPD dispatched calls, how protection details were organized, how radio traffic moved. He had pre-identified targets, pre-distributed a manifesto, and had military and law enforcement training that told him approximately how the response would unfold. That is a materially different threat profile than a suspect who is discovered, pursued, and apprehended.

  • The manifesto as advance intelligence. Dispatch centers and law enforcement had Dorner's target list before the killing started. The operational value of that document — identifying the forty-plus named targets, assigning and tracking protection details, maintaining situational awareness of which targets were most exposed — was a dispatch coordination function running in parallel with normal operations. The manifesto was intelligence. Treating it as such meant tracking which protection details were active, which targets were highest risk, and routing any call involving a named target through elevated protocols immediately.
  • Channel security in a threat with insider knowledge. Dorner's knowledge of radio protocol raises a question that applies in any situation where a suspect may be monitoring law enforcement communications: what information can safely be broadcast over channels the suspect may have access to? Encrypted channels, code words, or alternative channels for tactical coordination aren't exotic — they're standard protocol in high-stakes operations. The Dorner event is a case study in why.
  • Self-deployment risk increases when officer safety is the threat narrative. When the threat is specifically targeting law enforcement, the instinct of officers to respond — to protect colleagues, to engage a threat against their own community — is powerful. Self-deployment (officers responding to an incident without dispatch authorization or assignment) is a documented problem in critical incidents, and it is most acute when officers are personally threatened. Dispatch maintaining awareness of who is actually assigned to what — versus who has converged on a scene without authorization — is harder when the emotional charge of the event pushes against the discipline of the dispatch system.
  • Protection details as a dispatch coordination function. Over forty named targets required protection. Each protection detail was a unit assignment, with location, personnel, and communication requirements. Tracking those details — knowing which ones were active, which had reported in, which had changed location — was a sustained dispatch function across nine days. The Torrance civilian shooting partly resulted from officers deployed to an unfamiliar area with limited briefing: a dispatch coordination failure, not just an officer decision failure.
🔴 The District Attorney's review of the Torrance shooting found that officers were deployed with "limited planning or tactical instruction and limited resources." That language describes a failure in the operational coordination chain that dispatch is part of — not just a failure in the moment of the shooting.
🚨 When Law Enforcement Shoots the Wrong Person
2
On February 7, in the span of 25 minutes, law enforcement officers in Torrance shot innocent civilians twice — once firing 107 rounds at two women delivering newspapers, once ramming and firing on a man driving to the beach. Both incidents arose from threat escalation during the manhunt. The officers had been deployed to protect named targets with limited briefing. What is the dispatch-level failure mode that contributed to these shootings, and how should dispatch think about its role in maintaining identification discipline during a high-threat manhunt?

The Torrance civilian shootings are often discussed as officer-level failures — impaired judgment under stress, poor threat identification, excessive force. That analysis is accurate as far as it goes. But the District Attorney's memo identifies a systemic dimension: officers were deployed to an unfamiliar area with limited briefing, inadequate equipment for the threat level, and no coordinated tactical plan. Dispatch is part of the chain that produces that deployment.

  • The briefing failure was a deployment failure. Officers sent to provide a protection detail in Torrance — an area unfamiliar to officers based in other LAPD divisions — were given an assignment without the supporting context: what exactly is the threat right now, what does the target vehicle actually look like, what are the specific rules of engagement for this detail? That context is normally passed at the supervisory and tactical level, not by dispatch. But when officers are being rapidly deployed from unfamiliar units in a compressed timeline, dispatch is often the last line of communication before an officer is placed in the field. If the briefing information is thin, dispatch relaying what it has — and flagging what hasn't been transmitted — matters.
  • Vehicle description management in a rolling manhunt is a dispatch function. Dorner's vehicle — a dark Nissan Titan — was the subject of a broadcast description. The vehicles that were shot in Torrance were a light blue Toyota Tacoma and a black Honda Ridgeline. Color discrepancy alone should have been a significant hesitation point. The critical question for dispatch: what was actually broadcast, how precisely was the description conveyed, and was there any mechanism for officers in the field to confirm identity before use of force? The answer in the Torrance incidents appears to have been: no.
  • Fear state and how it travels through communications. The DA's memo noted that "the fear of Dorner was understandable and justified." That fear moved through the system — radio traffic, briefings, interpersonal communication among officers. Dispatch is part of that system. Urgent, alarm-laden radio traffic transmissions during a threat event elevate officer arousal, which has known effects on threat perception. How dispatch manages its tone during a prolonged high-threat event — maintaining urgency without transmitting panic — is a professional skill that has real safety consequences.
  • After a civilian shooting during a manhunt, dispatch coordination continues. Once it was clear that civilians had been shot, dispatch faced multiple simultaneous tracks: continue the manhunt coordination, coordinate medical response for the shooting victims, and manage the scene of a law-enforcement-involved shooting — all while the actual suspect remained at large. That is the cascading complexity that a single high-profile incident in a sustained manhunt creates.
📋 $4.2 million settlement to Margie Carranza and Emma Hernandez. $1.8 million to David Perdue. Eight officers found to have violated department use-of-force policy. Criminal charges declined. The cost of the Torrance incidents extended far beyond the morning of February 7.
🏔️ Multi-Jurisdictional Manhunt Across Shifting Geography
3
The Dorner manhunt crossed four California counties over nine days — Orange County, Los Angeles County, Riverside County, and San Bernardino County — and involved multiple independent law enforcement agencies, LAPD, the California Highway Patrol, and the San Bernardino County Sheriff's Department. Dorner moved deliberately between jurisdictions. What does multi-jurisdictional coordination look like from a dispatch perspective during a sustained manhunt where the suspect is actively moving across agency boundaries — and how does the picture change when you know the suspect is deliberately using jurisdictional seams?

Dorner's movement across four counties was not random. His manifesto showed an understanding of law enforcement organizational structure. Moving from Irvine (Orange County) to Corona and Riverside (Riverside County) to Big Bear (San Bernardino County) kept him operating across the boundaries of agencies that, while cooperating, had different command structures, different radio systems, and different situational pictures. The jurisdictional seam is a real vulnerability in law enforcement response, and Dorner, as a former officer, knew it existed.

  • Dispatch-to-dispatch coordination is not automatic. When a suspect crosses a county line, the dispatchers on each side of that line don't automatically share information in real time. The mechanisms for cross-jurisdictional communication — shared channels, mutual aid protocols, liaison officers at command posts — have to be activated. In a planned emergency, this is orderly. In a rapidly developing manhunt, it depends heavily on whether the receiving dispatch center has been notified and what information they've been given.
  • The command post at Bear Mountain ski resort as a coordination node. During the Big Bear phase, SBSD established a command post that functioned as the operational hub for the mountain search. Dispatch coordinated through that command post, which effectively became a regional coordination layer above normal dispatch operations. Understanding when a command post takes precedence over normal dispatch routing — and when dispatch still has independent responsibilities that aren't visible to the command post — is a critical operational question in extended incidents.
  • Mutual aid and self-deployment look the same on the radio. During a high-profile manhunt involving threats to law enforcement, officers from multiple agencies converge. Some of that convergence is formal mutual aid — requested, coordinated, documented. Some of it is self-deployment — officers responding because they want to, without formal assignment. From dispatch's perspective, distinguishing between the two in real time is difficult. Maintaining accurate unit accountability — knowing who is actually assigned versus who has converged — becomes harder as incident scale increases.
  • Information about Dorner's location was consistently wrong. For five days, Dorner was 200 yards from the command post. Law enforcement was conducting searches based on a last-known position that was five days old. Dispatch coordination during this period was built on a situational picture that was fundamentally inaccurate — and there was no mechanism to identify that inaccuracy until Dorner surfaced on his own. The lesson is not that dispatch failed to find him; it's that extended manhunts operate on deteriorating information, and the confidence of the operational picture should be calibrated accordingly.
📞 The 911 Call That Ended the Manhunt
4
The manhunt ended when Karen Reynolds called 911 at 12:23 PM on February 12 — she and her husband had been tied up by Dorner, who had been hiding in their vacation condo for five days, 200 yards from the law enforcement command post. That single 911 call triggered the final mobilization. What does the Reynolds 911 call represent about caller-as-first-intelligence-source in a sustained manhunt — and how should dispatch handle a hostage-situation call that is simultaneously the most significant development in a nine-day multi-agency manhunt?

Karen Reynolds had been tied up, gagged, and held with a pillowcase over her head. She freed herself enough to reach her phone and called 911. That call was simultaneously: a hostage situation report, a carjacking report, a missing person update (Dorner's location was now known for the first time in five days), and the initiating event for the final phase of the most significant law enforcement manhunt in Southern California in decades. Dispatch received all of that in the form of a caller who had just been victimized and was reporting what had happened to her.

  • Caller-as-first-intelligence is the dispatch norm, not the exception. The Reynolds call illustrates a principle that applies to every major incident: the most important new information about a developing situation often arrives through a 911 call from a civilian who doesn't know its operational significance. Karen Reynolds knew she had been tied up by someone. Dispatch, working with the information already in the system, knew that Dorner had been at large and was believed to be in the Big Bear area. The significance of the call was not visible in the call itself — it became visible when the call was connected to the existing operational picture.
  • The initial report was a carjacking call. SBSD dispatchers received the Reynolds call and began responding to it as a carjacking — which it was. The vehicle description, direction of travel, and rapid mobilization all tracked against a carjacking protocol. The operational overlay — that this vehicle was being driven by a fugitive who had already killed three people and had a multi-agency manhunt underway — had to be connected to the carjacking call by dispatch, not assumed to be already integrated.
  • Communicating significance without adding confusion. When dispatch recognizes that a routine-presenting call has major operational significance — a carjacking that is also a Dorner sighting — the challenge is communicating that significance to every relevant unit and command level without creating confusion, duplicate responses, or channel saturation. The broadcast that says "we have a carjacking" and the broadcast that says "Dorner's location has been confirmed — units are moving to intercept" are different communications serving different audiences and triggering different responses.
  • Caller welfare during a high-consequence relay. Karen Reynolds called while she was still in a state of acute distress. Dispatch managing the dual tasks of extracting the most operationally critical information from her (vehicle description, direction of travel, Dorner's physical state and weapons) while also ensuring her safety and the welfare of her husband is a call-taking challenge that has direct operational consequences. A caller who can't communicate clearly because they're being managed poorly is a caller who produces less actionable intelligence.
📞 The 911 call from Karen Reynolds at 12:23 PM on February 12 was the only new confirmed intelligence about Dorner's location produced during the entire nine-day Big Bear search. Everything before it — tips, thermal searches, door-to-door checks — had not located him. A single civilian caller ended the manhunt.

Your Notes

Record your dispatcher name, center, and any notes from today's discussion. Your entries are saved locally and print with the exercise.
Saved

Answer all five questions, then tap Submit to see your score and feedback. Questions are grounded in the dispatch themes from this exercise.

Question 1 of 5
Christopher Dorner's manifesto named over 40 law enforcement targets before the killing began. From a dispatch coordination standpoint, what is the most important operational use of that list?
Question 2 of 5
Eight LAPD officers fired 107 rounds at a blue Toyota Tacoma carrying two women delivering newspapers. The DA's review found officers were deployed with 'limited planning or tactical instruction.' Which dispatch-level factor most directly contributed to the conditions that produced this shooting?
Question 3 of 5 — True / False
True or False? During a multi-jurisdictional manhunt, officers from cooperating agencies who respond to the area are automatically integrated into dispatch coordination through mutual aid protocols.
Question 4 of 5
Karen Reynolds called 911 at 12:23 PM on February 12 to report that she and her husband had been tied up. This was simultaneously a hostage call and the first confirmed intelligence on Dorner's location in five days. What is dispatch's most important action in the first 60 seconds of this call?
Question 5 of 5
During a sustained manhunt where the suspect is a former law enforcement officer with knowledge of radio protocols, which dispatch adaptation is most operationally justified?
After-action reviews, law enforcement analysis, and journalism on the Dorner manhunt and its operational lessons.
🔗
Continue the series: Return to the full exercise hub. The Dorner manhunt pairs with Exercise #025 — Beltway Snipers as complementary exercises on targeted threat dispatch: both involve a trained shooter targeting law enforcement in a sustained multi-jurisdictional event.
For Training Coordinators

Use these exercises in your program

Every exercise is free to use in shift briefings, training blocks, or self-study. Print to PDF for handouts. No login, no procurement, no subscription. Have a question or an incident you think should be an exercise? Drop a note.

Goes directly to my inbox. Nothing stored or tracked.

Get notified when new exercises drop

One email per new exercise. Nothing else.

No spam. No tracking. Unsubscribe anytime. Powered by Buttondown.