U.S. · News · Florida
An armed man crashed a sedan through the perimeter fence of the Citibank campus in Brandon at lunchtime on Wednesday, fatally shot a woman in the outdoor dining area, and was then shot in an exchange of gunfire with a Citibank security guard — a Tampa Citibank shooting that left two people dead, four others hurt, and a 3,200-employee campus locked down while more than 360 deputies cleared it building by building.
The Tampa Citibank shooting began at about 12:11 p.m. ET on Wednesday, November 4, 2026, when multiple 911 calls reported shots fired at Citibank Center, the Citibank campus in Brandon, just outside Tampa, Florida, near Princess Palm Avenue and Falkenburg Road. By the time the Hillsborough County Sheriff’s Office gave its fullest account on Wednesday afternoon, the toll was two dead — a woman shot in the campus’s outdoor lunch area and the armed suspect, who was shot by a Citibank security guard and died at a hospital — and four other people taken to hospital with non-life-threatening injuries. Sheriff Chad Chronister said investigators believe the attack was a “targeted incident.” The sheriff’s office said there was no ongoing threat to the public.
About 3,200 employees were on site when the shooting started, and more than 360 Hillsborough County deputies responded and cleared the campus. The identities of the woman who was killed and of the suspect had not been released as of Wednesday’s briefings, a motive remained under investigation, and officials said it was not known whether the suspect and the woman knew each other. Those four unknowns — two names, a motive, and a possible connection — are the frame around everything that is confirmed, and this article keeps the two separate throughout: what officials have established, and what they have not.
What happened, minute by minute
12:11 p.m.: the 911 calls
The first confirmed timestamp in the Citibank Center shooting is 12:11 p.m. ET, when the sheriff’s office received multiple 911 calls reporting shots fired in the plaza area of the campus, Chief Deputy Frank Losat told reporters at a mid-afternoon press conference. The calls came at the height of the lunch hour, on a campus where thousands of employees were at work, and the sheriff’s office responded to what it described on social media as an “active threat” at the Citibank Center, urging the public to avoid the area of Princess Palm Avenue and Falkenburg Road.
The breach: a sedan through the fence
According to Losat’s press-conference account, the armed suspect breached the campus’s secure perimeter by crashing a small four-door sedan through a fence and into an outdoor lunch and dining area. The suspect got out of the vehicle and fatally shot a woman who was sitting in the dining area. That sequence — a vehicle driven through a perimeter barrier, then gunfire directed at a specific person in a crowded lunchtime space — is the core of the official account of how the Brandon Florida shooting today began, and it is the sequence investigators will now test against the campus’s own cameras, the recovered vehicle, and the video the sheriff’s office has asked the public to share.
About 12:15 p.m.: the security guard exchange
Minutes after the first 911 calls — at about 12:15 p.m. ET, Losat said — an armed Citibank security guard engaged the suspect. The two exchanged gunfire, and the suspect was shot. He was taken to a hospital, where he died. Losat credited the guard with ending the attack. “The security guard employed by Citibank stopped the threat,” he said, as reported by the Herald Tribune. “Was there potential for other violence? Absolutely.” CNN reported that the security guard was among those injured; officials said the four people taken to hospital had non-life-threatening injuries. The exchange, four minutes after the first calls, is why the Hillsborough County sheriff shooting ended as quickly as it did: the person who stopped the suspect was not a deputy racing to the scene but a guard already inside it.
The clearing: 360 deputies and 3,200 employees
What followed the gunfire was the largest part of the day’s operation. More than 360 deputies responded — Sheriff Chronister put the figure at more than 365 in a social media post — and cleared the campus, a search the Associated Press described, from responder radio traffic, as an exhaustive floor-by-floor effort in which officers found employees sheltering in locked rooms and closets and escorted them out of the buildings and the parking garage. Television footage showed long lines of workers streaming out of the office buildings. The sheriff’s office said it had “responded to an active threat and is currently clearing the building,” and later confirmed that the Citibank Tampa active threat was over and the suspect was deceased. For the roughly 3,200 employees on site, the afternoon became an evacuation; for the families watching it, it became a wait — the AP spoke to one father, Doug Merritt, who said his son fled after hearing gunshots and that for around an hour he did not know whether his son was safe.
What officials said
The Frank Losat Citibank press conference
The factual spine of the official account came from Chief Deputy Frank Losat, who laid out the timeline — the 12:11 p.m. calls, the sedan through the fence, the woman shot in the dining area, the guard’s exchange at about 12:15 p.m., the suspect’s death at hospital, the four injured with non-life-threatening injuries, and the roughly 3,200 employees on site — at a mid-afternoon news conference on Wednesday. Losat was equally explicit about the limits of what the sheriff’s office knows: a motive remained under investigation, and it was not immediately known whether the suspect and the woman knew one another.
The Chad Chronister targeted incident assessment
Sheriff Chad Chronister, posting on X and social media as the operation unfolded, said investigators believed the shooting was targeted: “We believe this is a targeted incident.” He confirmed that “the suspect involved in the Citibank Active Threat scene is deceased,” and that more than 365 deputies had responded. The sheriff’s office also asked anyone with video of the incident to share it with investigators — People reported the office directed video to videos@teamhcso.com — a standard step in an investigation that will be built substantially out of footage: campus cameras, deputies’ recordings, and the phones of thousands of employees who were on site.
Citibank’s statement
Citigroup, in a statement carried by the Associated Press and CNN, said: “We are aware of an incident impacting our site in Tampa, Florida and are coordinating with law enforcement.” The company did not elaborate. Nothing in the official record released on Wednesday identified the woman who was killed as a Citibank employee, a contractor, or a visitor, and the company’s statement did not address the identities of the dead or the injured, the status of the security guard, or when the campus would reopen.
The victims and the injured: what is known, and what is not
Two people are dead. The first is the woman shot in the outdoor dining area after the suspect crashed through the fence; she was pronounced dead from the shooting that officials described as the attack’s opening act. The second is the suspect himself, shot in the exchange with the security guard and pronounced deceased after being taken to a hospital — the Tampa office shooting suspect dead at hospital, not at the scene. Four other people were taken to hospital with injuries officials described as non-life-threatening. Whether the injured were shot, hurt in the crash or the evacuation, or injured in some other way had not been specified in the accounts officials gave on Wednesday; CNN reported the security guard was among the injured.
What is not known is, at this stage, most of the human story. Neither the woman nor the suspect had been publicly identified. Officials had not said whether the two knew each other, what relationship — if any — connected the suspect to the campus or to anyone on it, or what weapon or weapons the suspect carried beyond the sedan he drove through the fence. Any account that supplies a name, a relationship, or a reason for the shooting before the sheriff’s office releases them is going beyond the confirmed record. This article will be updated as identifications and verified details are released.
Why this matters
A 3,200-person campus is a small city, with a small city’s exposure
Citibank Center is not a branch office. It is a 588,000-square-foot corporate campus — four three-story office buildings, per the Associated Press — holding, on an ordinary Wednesday, enough people to fill a small town. Workplace security at that scale is designed around a familiar set of assumptions: a perimeter, controlled entry points, badged employees, and armed guards inside. Wednesday’s attack tested the weakest of those assumptions first. The suspect did not badge in, bluff in, or tailgate in; on the official account, he drove a sedan through the fence. A perimeter designed to channel people can be defeated by a vehicle, and the space he reached — an outdoor lunch area, where employees gather unbadged, unsearched, and in the open — is precisely the kind of soft, semi-public space that corporate campuses are full of and that hardening reaches last. The questions that follow from that are engineering questions as much as policing ones, and every large employer in the Tampa Bay area will be asking them of its own campuses this week.
“Targeted” is a finding investigators do not offer lightly
The single most consequential word in the official account is the sheriff’s: “targeted.” When investigators describe a public shooting as targeted, they are telling the public two things at once: that the evidence so far points to a specific intended victim rather than an indiscriminate attack on whoever was present, and that the danger to everyone else ended with the suspect. That distinction drives everything downstream — whether the public should fear a continuing threat (officials said there was none), how the investigation allocates its resources (toward a relationship and a motive, not a manhunt), and how the 3,200 people who were on the campus should understand what happened around them. It is also, at this stage, a preliminary characterization, not a conclusion: the same officials who used the word said the motive was still under investigation and that they did not yet know whether the suspect and the woman knew each other. Both things are true at once, and reporting the sheriff’s assessment without its preliminary status — or ignoring the assessment because it is preliminary — would each mislead in a different direction.
The guard exchange is the fact the timeline turns on
Four minutes separate the first 911 calls from the moment, on the official account, when an armed Citibank security guard engaged the suspect. In the long American record of workplace and public-space shootings, the interval between the first shot and the moment someone with a weapon confronts the attacker is the variable that most often decides the toll. Here, that interval was minutes, because the guard was already there. Losat’s assessment — that the guard “stopped the threat” and that there was “absolutely” potential for more violence — is an official judgment, and it will be weighed again when the full record is public, including how many shots were fired, by whom, and in what sequence. But on the facts officials released Wednesday, the presence of an armed guard inside the campus is the reason the Citibank Center shooting was a four-minute attack rather than a longer one, and it will be the central fact in the security debate this shooting starts.
The campus: Citibank Center in context
Citibank Center sits in Brandon, in east Hillsborough County’s Sabal Park office area near Falkenburg Road, about 9 miles northeast of downtown Tampa. The Herald Tribune, citing the sheriff’s office, described it as a 588,000-square-foot campus of numerous office buildings; the AP described four three-story buildings housing thousands of the banking giant’s employees. Citibank’s Tampa operation is one of the largest corporate presences in the Tampa Bay region, and the Brandon campus is a core part of it — which is why a lunchtime shooting there drew a response of more than 360 deputies, tied up the roads around Princess Palm Avenue and Falkenburg Road for the afternoon, and put thousands of families, across the region and beyond it, into the particular wait that Doug Merritt described to the AP. The campus is a workplace, but at 3,200 people on site it is also a population, and on Wednesday it was treated as both: a crime scene to be cleared floor by floor and a community to be evacuated and reunified.
Who is affected, and what experts will ask next
The people most directly affected are the families of the woman who was killed and of the suspect, neither of whom had been publicly identified on Wednesday; the four injured and their families; the security guard who exchanged fire with the suspect; and the roughly 3,200 employees who sheltered in locked rooms and closets or fled, many of whom will return to a campus that is now a place where a colleague was killed at lunch. Beyond the campus, the affected circle includes every employer operating a large, fenced, lunchtime-crowded campus in Florida and nationally — and it is their security directors who will ask the first expert questions: whether vehicle barriers, not just fences, guarded the dining areas; whether outdoor gathering spaces sat inside or outside the secure perimeter; and how an armed-guard force is sized and positioned for a site of 588,000 square feet.
Critics and safety experts will ask a second set of questions, aimed at the public record itself: how quickly the sheriff’s office can support the “targeted” characterization with an identified relationship or motive; whether the suspect had any prior connection to Citibank, as an employee, contractor, vendor, or otherwise; and what the four injured people’s injuries actually were. Supporters of the sheriff’s office’s handling will point to the speed of both the guard’s intervention and the campus clearing. None of those arguments can be settled on Wednesday’s record, and this article takes no side in them: the verified facts are the fence breach, the timeline, the toll, and the statements quoted above.
What happens next
The investigation now moves in three directions at once. First, identification: the sheriff’s office and the medical examiner will name the woman who was killed and the suspect, and those names will begin to answer the question officials left open on Wednesday — whether the two knew each other. Second, motive: investigators are reviewing video, including footage the sheriff’s office has publicly asked witnesses to share, and the suspect’s vehicle, movements, and any connection to the campus. Third, the campus itself: when Citibank Center reopens, in what phases, and with what changes to the perimeter the sedan drove through are decisions Citibank and the sheriff’s office will announce in the coming days, and they will matter to every one of the thousands of people who work there.
Two people are dead, four are in hospital, and a workday lunch hour on a corporate campus in Brandon became the kind of afternoon that 3,200 families will measure time from. What the sheriff’s office confirms next — the names, the relationship if there is one, and the motive — will be reported here as it is verified.
Related reading: Magic City Classic shooting in Birmingham: 1 dead, 8 injured after the game · Four killed in Dallas Deep Ellum Halloween shootings · 9 dead in the Erie mass shooting
Sources
Associated Press, “Florida sheriff says 2 dead, including suspect, as witnesses report shooting at Tampa office complex” (November 4, 2026) — the more-than-360-deputy response, the floor-by-floor clearing and employees sheltering in locked rooms and closets, the four three-story office buildings, Citigroup’s “aware of an incident” statement, and Doug Merritt’s account, as carried by KCAU 9 — kcau9.com; USA Today, “Security guard kills suspect after woman is fatally shot on Tampa Citibank campus” (November 4, 2026) — the 12:11 p.m. ET 911 calls, the 12:15 p.m. ET security-guard exchange in Losat’s account, the 3,200 employees on site, the four injured with non-life-threatening injuries, the campus about 9 miles northeast of downtown Tampa, and the unidentified woman and suspect — usatoday.com; Herald Tribune (USA Today Network), “Two dead after shooting at Citibank in Tampa area, police say” (November 4, 2026) — the sedan crashing through the fence into the outdoor lunch area, the woman fatally shot in the dining area, Losat’s “stopped the threat” remarks, the Princess Palm Avenue and Falkenburg Road location, and the 588,000-square-foot campus — heraldtribune.com; Hillsborough County Sheriff’s Office — statements by Sheriff Chad Chronister on X and social media on November 4, 2026 (“We believe this is a targeted incident”; the suspect deceased; more than 365 deputies responded; the appeal for witness video) and Chief Deputy Frank Losat’s November 4 press conference, as reported by the Associated Press, USA Today and the Herald Tribune; CNN, “Security guard stops gunman who drove into Tampa-area Citibank Center and opened fire, killing a woman” (November 4, 2026) — the security guard among the injured and the sheriff’s office’s statement that there was no longer a threat to the public.