Malls and retail centers are built to draw crowds. Open entrances, long hours, large parking fields, and busy back-of-house corridors make them welcoming. Those same features make them hard to secure. For a security executive, the challenge is to protect a soft, high-traffic target without turning it into a fortress.

Commerce sites are a leading setting for active shooter attacks. In 2024 they accounted for 17 percent of the incidents recorded by the FBI, behind only open spaces.

The risk is not only inside the store. Roughly 80 percent of crime at shopping centers occurs in the parking lot, and parking facilities rank among the most common locations for violent crime in the United States.

Active shooter attacks are the most visible threat, but not the most common. Most mall gunfire begins as a dispute between individuals or groups, and gang and youth-group violence now drive a large share of incidents. This shapes both prevention and the mall’s legal and reputational exposure.

This paper is written for mall and retail security leaders. It focuses on three levers you already control: camera utilization, security patrols, and response protocols. It also makes the executive case, including the liability exposure that follows a preventable incident.

The core message is practical. Most malls do not need more cameras. They need to use the cameras they already have, deploy patrols where risk concentrates, and rehearse a response that turns an alert into action in seconds. Technology strengthens detection. It does not replace people, patrols, or planning.

THE THREAT: WHAT THE DATA SHOW

Retail is a repeat target

The FBI counted 24 active shooter incidents in 2024. Four were at commerce locations, which the FBI defines to include malls and retail stores open to pedestrian traffic. Those incidents were 17 percent of the total. The overall count fell 50 percent from 2023, but retail remained one of the top categories.

Recent attacks show the range of motive and the value of fast response. In 2023 a gunman killed eight people at Allen Premium Outlets in Texas; the attack was hate-motivated, and a police officer already on site stopped the shooter. In 2022 a gunman at Greenwood Park Mall in Indiana was stopped by an armed bystander within about 15 seconds. Speed of response shaped both outcomes.

Group and gang disputes are the more common gunfire

Active shooter attacks draw headlines, but they are not the most common source of gunfire at malls. Most shootings begin as a dispute between individuals or groups that escalates. The FBI’s active-shooter count actually excludes gang violence, drug violence, and domestic or personal disputes, so the official figure understates how often shots are fired at retail sites.

The pattern is consistent. Many mall shootings start as a verbal argument or fight that turns physical, then a firearm appears. The fatal 2022 Mall of America shooting began as an altercation between two groups; one of those involved was later tied to gang-related killings. For a security team, the practical lesson is that the warning sign is often a brawl, not a weapon.

A newer trend adds pressure: large, social-media-organized youth gatherings, sometimes called “teen takeovers.” Since 2024, groups of dozens to hundreds of minors have converged on malls and public areas, and some have ended in fights, robberies, and gunfire. These events can overwhelm normal staffing within minutes.

The parking lot is the front line

For a mall, the highest-risk ground is often outside the doors. Parking facilities are the third most common location for violent crime nationally, and account for a large share of robberies, vehicle crime, and assaults. Poor lighting, low foot traffic, blind spots behind columns, and many exits all raise risk.

The pattern matters for planning. If most incidents begin or occur in the lot, then security cannot start at the entrance. Detection and patrol must extend to the perimeter, the garage, and the approaches.

Back of house is a soft interior

Loading docks, receiving corridors, stockrooms, and staff entrances are designed for throughput, not security. They offer quiet access, few witnesses, and a route around the public entrance. Domestic disputes, disgruntled workers, and unauthorized entry often play out here. Back-of-house doors that are propped open erase the value of front-door controls.

Recent mass shootings at U.S. retail sites

THE CAMERA PROBLEM - AND THE OPPORTUNITY

Most malls are already saturated with cameras. The problem is not coverage. It is that cameras record events but do not interpret them, and no team can watch them all.

A single retail property commonly runs dozens of cameras into a recorder. Yet a human operator can meaningfully watch only a handful of screens at once, and attention drops sharply after about 20 minutes of continuous monitoring. In practice, most footage is reviewed after an incident, not during it.

This is the opportunity. The fastest security gains at most malls do not come from buying more cameras. They come from getting more value out of the cameras already installed. That means three things: knowing what the cameras actually cover, monitoring the highest-risk views live, and adding software that watches every feed at once and raises an alert the moment a weapon appears.

A LAYERED APPROACH TO PREVENTION

No single measure keeps a mall safe. Safety comes from layers that work together. For retail, five pillars carry most of the weight: camera utilization, security patrols, response protocols, managing group violence, and the physical environment.

1. Camera utilization

Make the existing camera estate earn its keep before spending on hardware:

● Run a coverage audit. Map every camera against the floor and site plan. Identify blind spots at entrances, cash points, stockrooms, loading docks, stairwells, and across the parking field and garage. ● Fix the basics. Clean lenses, correct camera angles, repair dead feeds, and improve lighting where views are dark. A working camera on a lit lot is worth more than a new camera on a dark one. ● Monitor by risk, not by habit. Put the highest-risk views, entrances, lots, and docks, on the operator’s primary screens. Rotate the rest. ● Add analytics on top of what you own. AI weapon-detection software runs on existing IP cameras and watches all feeds continuously, turning passive recording into real-time alerting. ● Extend coverage outward. Priorities the parking lot, garage, and approaches, where most incidents begin.

2. Security patrols

A visible, mobile presence deters attackers and shortens the distance to any incident. Patrols are most effective when they are deliberate, not random:

● Weight patrols to the lot and garage. This is the highest-risk ground and the area customers fear most. ● Vary timing and routes so patterns are not predictable, but ensure blind spots and back-of-house doors are checked on a set cadence. ● Use patrols to enforce the basics: no propped exterior doors, no loitering at docks, controlled staff entrances. ● Equip officers to act as sensors. Give them radios tied to the camera operators, so a call from the floor and a camera alert reach the same command point. ● Coordinate with tenants. Store staff are extra eyes; give them a simple, direct way to report concerns to security.

3. Response protocols

When an attack unfolds in seconds, a rehearsed response is what saves lives. Every retail security program should have:

● A written emergency action plan for active threats, covering lockdown, evacuation routes, and shelter points for sales floor, lots, and back of house. ● Clear, assigned roles for security officers, the camera room, mall management, and tenants. ● Pre-planned coordination with local police and EMS, including shared floor plans, camera access, and a standing relationship before any incident. ● Fast, mass communication: public-address, tenant alerts, and mobile notifications to reach staff and shoppers at once. ● Regular drills with tenants and responders, at least twice a year, so people act from memory under stress. ● Trauma kits and staff trained in Stop the Bleed at key points across the property.

4. Managing group violence and youth gatherings

Because most mall gunfire starts as a dispute, stopping fights early is gun-violence prevention. Practical measures include:

● De-escalation training for security and store staff, so a brawl is calmed or separated before a weapon appears. ● A clear code of conduct, and where warranted a youth chaperone policy. Several malls now require guests under 18 to be accompanied by an adult on peak evenings, which has reduced brawls and theft. ● Monitoring social media and local networks for planned “takeover” gatherings, so staffing and police support can be arranged in advance. ● A crowd-management plan for sudden surges: extra staff on call, controlled entrances, and the ability to close common areas quickly. ● A standing relationship with the local police gang or youth unit, and shared intelligence on repeat offenders and known disputes.

5. The physical environment

Design and upkeep lower opportunity every hour of the day. Bright, even lighting across lots and garages; clear sightlines without blind corners; controlled and monitored back-of-house doors; and well-kept grounds that signal the space is watched. These measures also reduce the everyday crime that drives customers away.

TECHNOLOGY’S ROLE: AI DETECTION ON EXISTING CAMERAS

The most cost-effective way to modernize a mall’s security is to add intelligence to the cameras already in place. AI weapon detection is designed to do exactly that.

These tools analyze live video from existing IP cameras and alert staff the instant a firearm becomes visible. Because the weapon is usually visible in the moments before or during the first shots, real-time detection converts a passive camera into an early warning. Several vendors offer this capability; buyers should compare accuracy, false alarm rate, integration, and independent testing. Scylla is one such option.

Characteristics that matter for a retail deployment include:

● Runs on existing cameras and common video management systems, so there is no need to replace the estate. ● Watches every feed at once, across sales floor, lots, garages, and docks, which no human team can do. ● Sends an alert with the camera location, a timestamp, and an image, so the camera room and patrols see the same picture. ● Connects to alerts, public-address, and access control, and can help trigger a lockdown or notify police automatically. ● Detects more than guns. Analytics can also flag aggressive behavior and fights, the common early signal at malls, giving staff a chance to intervene before a weapon is drawn. ● Human-in-the-loop by design: the system flags the threat; trained staff verify and decide.

The limits matter for planning. Detection sees visible weapons, not concealed ones or intent. It is a detection layer, not a shield. Its value comes from linking cameras, patrols, and response into one motion: a weapon appears, the system sees it, the camera room and officers are alerted, doors lock, police are called, and the response begins in the seconds that decide the outcome.

THE BUSINESS CASE ANS LIABILITY

For an executive, security is also a risk-management and financial decision. Three points carry weight in the boardroom: legal liability, reputation and revenue, and cost efficiency.

Legal liability and the foreseeability standard

Courts do not make a mall the insurer of every visitor’s safety. But they do impose a duty to provide reasonable security when violent crime is foreseeable. Foreseeability is judged largely by prior crime on or near the property, and this is where a history of shootings or gang activity becomes a legal exposure, not just an operational one.

The leading Texas case, Timberwalk Apartments v. Cain, set four factors courts weigh to decide whether third-party violence was foreseeable: the proximity of prior crimes, their recency and frequency, their similarity to the incident, and their publicity. A record of repeated violence on site makes an attack harder to call unforeseeable.

Other states apply a similar logic. In Posecai v. Wal-Mart Stores, the Louisiana Supreme Court adopted a balancing test, weighing the foreseeability and gravity of harm against the burden of providing security, and treated prior crimes on the premises as the most important factor. Because Sam’s had seen only three predatory offenses in six and a half years, no duty to post guards arose.

For shopping centers specifically, the California Supreme Court in Ann M. v. Pacific Plaza Shopping Center held that a landlord’s duty to hire security guards turns on the foreseeability of violent crime, which generally requires evidence of prior similar incidents on the premises.

Read together, these cases point one way for a mall operator. Frequent fights, gang activity, or prior shootings raise the legal duty to act. A documented program, vulnerability assessments, active monitoring, deliberate patrols, and a rehearsed response, is the evidence that the duty of reasonable care was met. Recorded footage that no one watched is weaker proof of diligence than a monitored system that generated an alert and a response. Litigation follows major incidents; the 2023 Allen attack, for example, produced lawsuits alleging inadequate security staffing.

Reputation and revenue

Violence also has a measurable commercial cost. A 2024 study in Marketing Science found that stores affected by a mass shooting saw lower foot traffic, shorter dwell times, smaller orders, and reduced revenue, with effects reaching stores up to about 1.25 miles away. Frequent gang activity or a reputation for danger produces the same effect more slowly: shoppers stay away, dwell time falls, and tenants weigh whether to renew.

For a mall, safety and brand are linked. A center known as safe protects its foot traffic, its anchor tenants, and its lease rates. A center known for violence loses all three. Security spending, seen this way, is also revenue protection.

Cost efficiency

The highest-value measures are low-capital. Adding analytics to existing cameras, weighting patrols to the parking lot, enforcing a code of conduct, and rehearsing a response cost little relative to their protective value. They also reduce the everyday theft and disorder that erode sales, so the same investment supports both safety and the bottom line.

Free federal help is available. CISA provides no-cost assessments, planning tools, and training for soft targets and crowded places, including retail. Engaging these resources early strengthens both the plan and the documented record of due diligence.

KEY RECOMMENDATIONS

● Audit before you buy. Map existing camera coverage against the site plan and close blind spots before adding hardware. ● Watch by risk. Put entrances, lots, garages, and docks on primary monitors; add AI weapon detection to watch every feed. ● Weight patrols to the lot. Concentrate visible, deliberate patrols where most incidents occur, and secure back-of-house doors. ● Rehearse the response. Maintain a written active-threat plan, coordinate with police in advance, and drill twice a year with tenants. ● Stop fights early. Train staff in de-escalation, set a code of conduct or youth chaperone policy, and use behavior detection to catch brawls before weapons appear. ● Connect the layers. Wire camera alerts to the camera room, patrols, public-address, and police so a warning triggers action in seconds. ● Light and maintain the perimeter. Fix lighting, sightlines, and upkeep across lots and garages. ● Manage the liability. Document active monitoring and response; use free CISA assessments to evidence due diligence.

SOURCES

1. FBI — Active Shooter Incidents in the United States in 2024

2. Parking facility crime statistics (NIJ/FBI data, compiled)

3. Spot AI — Mall and Shopping Center Parking Lot Security (parking-lot crime share, monitoring)

4. IntelliSee — Shopping Mall Security Cameras: 400 Eyes That Can’t Think

5. 2022 Greenwood Park Mall shooting — case reference

6. 2023 Allen, Texas mall shooting — case reference and litigation

7. Mall of America 2022 shooting — gang-related dispute (KARE 11)

8. CRS — How to Define Mass Shootings (FBI definition exclusions)

9. CNN — Teen takeovers explainer; KTLA — mall chaperone policy

10. Timberwalk Apartments v. Cain, 972 S.W.2d 749 (Tex. 1998) — foreseeability factors

11. Posecai v. Wal-Mart Stores, Inc., 752 So. 2d 762 (La. 1999) — balancing test

12. Ann M. v. Pacific Plaza Shopping Center, 6 Cal. 4th 666 (1993) — shopping-center duty

13. Marketing Science (INFORMS) — Mass Shootings and Their Impact on Retail (2024)

14. CISA — Security of Soft Targets and Crowded Places

15. Scylla — Gun Detection System and layered security framework